403 when having full access to the environment

Nealan Vettivelu
Nealan Vettivelu
Second Anniversary Name Dropper Facilitator 1
in Blackbaud Raiser's Edge NXT® APIs

Hey team,

I'm currently trying to use the constituent API (https://developer.sky.blackbaud.com/docs/services/56b76470069a0509c8f1c5b3/operations/ListConstituentCodesAllConstituents )

However I'm getting a 403 (Forbidden). I have checked the application and it has a full data scope , and in the environment I can see Full access as well.

I'm currently using my personal subscription key + the access token that is created via the authentication process.

I have validated that this works (am getting a 200 response - when connecting to other endpoints (

).

I'm unsure as to next steps as from both the application + environment point of view I have full access.

Cheers,

Comments

  • Nealan Vettivelu
    Nealan Vettivelu
    Second Anniversary Name Dropper Facilitator 1

    bump

  • Chris Rodgers
    Chris Rodgers Blackbaud Employee
    Ninth Anniversary Kudos 3 Name Dropper Participant

    @Nealan Vettivelu

    Hello. Your application's ability to access a resource on SKY API is subject to the access defined on your application connection (e.g. Full Access) and the permissions of the user who authorized your applicated via OAuth. I confirmed that your application's requests are set to Full Access. You were the consenting user for your application, so the requests are subject to your Raiser's Edge NXT permissions. Can you confirm that you have access to these Constituent resources inside the product? If not, an admin at your organization will need to update your account's access.

    If you and/or your admin feel more comfortable testing your application against a different environment, you can request access to our SKY Developer Cohort environment instead (step 1).

  • Nealan Vettivelu
    Nealan Vettivelu
    Second Anniversary Name Dropper Facilitator 1

    @Chris Rodgers
    Thanks Chris i'll try run the code on the development environment to validate it - if that is fine i'll reach out to the admin to ensure we have constituent data (i strongly believe we do but can't hurt to check)

Categories