Closed ZachChristensen28 closed 11 months ago
API credentials are set up with read/write permissions on the Identity Protection entities.
Observed in logs:
403 error "access denied, authorization failed"
1.0.1
9.0.1
New API Requirements add to docs that resolves the issue: https://splunk-ta-crowdstrike.ztsplunker.com/quickstart/api-token/
Bug description
API credentials are set up with read/write permissions on the Identity Protection entities.
Observed in logs:
403 error "access denied, authorization failed"
Related links
TA-crowdstrike-identities Version
1.0.1
Splunk Version
9.0.1