Are some API/swagger calls admin only? Is there only one admin?

[MrNoTip 2]

I have a library of API based calls so that I can run my 'as needed' automation calls from streamdeck, and a few other other use cases that fall out of standard automation tooling (HC3, Alexa, etc). This has always worked pretty well on HC2, but I prefer to use a restricted local only svc account if possible.

 

I've got that user set up, and it can certainly execute informational/GET requests fine, but it's getting a 403 running a DELETE on /api/debugmessages. My admin can do this without issue.

 

• I've tried all advanced perms for the svc account without success. Are calls such (PUT, DELETE, etc) restricted to admin only?
• Is it correct that 'admin' is more 'owner' in HC3, with only one user able to hold this permission?

 

PS, I was going to show a photo of my fun, tactile streamdeck setup for interest, but realised how embarrassingly filthy the thing is....so you just get a screenshot of the config

 

Please login or register to see this attachment.

Please login or register to see this attachment.

Edited November 16, 2024 by MrNoTip
most of my post disappeared