christaylorcodes
Screenconnect permissons
what permissions are required for the api user to connect. i attempted to create a group with only ViewSessionGroup granted to all session groups. i plan on only using this to export data so only read access is needed. when i connect i get this. Connect-CWC -Server $Server -Credentials $Credentials Connect-CWC : An exception has been thrown. --> The remote server returned an error: (401) Unauthorized. An error has been thrown. --> --> {"errorType":"SecurityException","message":"Needs permission","detail":null} at Invoke-CWCWebRequest, C:\Program Files\WindowsPowerShell\Modules\ConnectWiseControlAPI\0.3.0.0\Private\Invoke-CWCWebRequest.ps1: line 25 at Get-CWCSessionGroup, C:\Program Files\WindowsPowerShell\Modules\ConnectWiseControlAPI\0.3.0.0\Public\SessionGroupService\Get-CWCSessionGroup.ps1: line 12 at Connect-CWC, C:\Program Files\WindowsPowerShell\Modules\ConnectWiseControlAPI\0.3.0.0\Public\Authentication\Connect-CWC.ps1: line 37 at <ScriptBlock>, <No file>: line 1 At line:1 char:1
- Connect-CWC -Server $Server -Credentials $Credentials
-
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Connect-CWC
when i add my user to my admin group it connects with no issues.
any idea what permissions are needed to get connected?
Looks like you need the Global Permission 'ManageSessionGroups' no matter what, and then any or all of the 'ViewSessionGroup' permissions under Scoped Permissions - AllSessionGroups and/or its children.
