Service Authorization and User Privileges

In addition to authentication ("who am I"), REST services often enforce authorization ("what am I allowed to do") on every service request (GET, POST, PATCH, and so on). REST services may require business users to have specific privileges in order for them to view and update data.

Oracle Visual Builder Add-in for Excel does not have access to the user identity or any kind of privilege/role/authorization information and can't check authorization prior to an operation. Instead, it is the service that enforces authorization and returns an error if the current user is not authorized to perform the requested operation.

If the workbook is configured to allow an operation the business user is not authorized for, the user may see an error such as an 403 Forbidden error. For these cases, the business user should follow up with the REST service owner or system administrator in order to be granted the appropriate privileges.

For an example of the privileges for REST API for Oracle Procurement Cloud, see Privileges in REST API for Oracle Procurement Cloud.