Creating a new System.Subscription via the API

james.kluza

Howdy, 

I am trying to dev a solution for the shortcomings associated with the included Orion integration with Web Help Desk for ticketing.  Rather than relying on an alert trigger to handle this activity I was looking at repurposing the subscription system already in place for that purpose.  

I am working with this endpoint documented in the schema:

/SolarWinds/InformationService/v3/Json/Create/System.Subscription (https://solarwinds.github.io/OrionSDK/swagger-ui/#/CRUD/CreateSystemSubscription)

The endpoint is responsive, but I am getting a access denied message:

"Message": "Access to System.Subscription denied.",

"ErrorCode": 20,

"UserMessage": "Access to System.Subscription denied.",

"ExceptionType": "SolarWinds.Data.AccessDeniedException",

"FullException": "SolarWinds.Data.AccessDeniedException: Access to System.Subscription denied.\r\n at SolarWinds.InformationService.Core.CrudProcessor.CreateAccessDeniedException(String message)\r\n at SolarWinds.InformationService.Core.CrudProcessor.CheckAccessControl(AccessControlOperations operations, IEntityType entity, IAccessControlResolver accessControlResolver)\r\n at SolarWinds.InformationService.Core.CrudProcessor.CheckAccessControl(AccessControlOperations operations, IEntityType entity, IEnumerable`1 propertyNames, IAccessControlResolver accessControlResolver, IIdentity userIdentity)\r\n at SolarWinds.InformationService.Core.CrudProcessor.<CreateInternal>d__19.MoveNext()\r\n at System.Linq.Enumerable.First[TSource](IEnumerable`1 source)\r\n at SolarWinds.InformationService.Core.CrudProcessor.Create(String entityType, IDictionary`2 properties, IQueryExecutionContext context)\r\n at SolarWinds.InformationService.Core.InformationService.Create(String entityType, IDictionary`2 properties)"

}

The account being used is an admin account and can effectively hit other endpoints.  

This endpoint must be accessible as that has to be the method Web Help Desk leverages to create it's initial configuration from an outside source.  

Any ideas? 

james.kluza

A little more digging here reveals a couple things:

1) In SWQL studio (running on the primary poller, connected via certificate), you can see in System>System.Subscriptions.  From there, you can run the create action and create a subscription no problem. 

2) When connected with an admin account, System.Subscriptions is not in the list so definitely a permissions issue. 

What is interesting with this is that this is the same account that is used to create the integration from the WHD side.  So, it must be running in some kind of inherited permission mode to create the sub? 

James