Understanding Setting Permission to Service Operations
Security operations are secured using permission lists.
When you select the User/Password Required check box on the Service Operations-General page, on inbound integrations, your integration partners must supply a valid user ID that is associated with the permission list you specify to invoke service operations.