<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Permission Issue with SUPER_ADMIN role in SmartZone and Virtual SmartZone</title>
    <link>https://community.ruckuswireless.com/t5/SmartZone-and-Virtual-SmartZone/Permission-Issue-with-SUPER-ADMIN-role/m-p/112893#M6104</link>
    <description>&lt;P&gt;vSZ version:&amp;nbsp;6.1.2.0.487&lt;/P&gt;&lt;P&gt;I created an administrator called `apiuser` and added to a group called `WiFi API Group`. Of course, SUPER_ADMIN role is granted to that group(contains ALL domains):&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="sayedtaban8_0-1770349592073.png" style="width: 400px;"&gt;&lt;img src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/16912i6216FE7BE9F3098C/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="sayedtaban8_0-1770349592073.png" alt="sayedtaban8_0-1770349592073.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;By using this user's credential, I was able to login and call some APIs:&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;A href="https://{host}:8443/wsg/api/public/query/zone" target="_blank"&gt;https://{host}:8443/wsg/api/public/query/zone&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;A href="https://{host}:8443/wsg/api/public/query/ap" target="_blank"&gt;https://{host}:8443/wsg/api/public/query/ap&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;A href="https://{host}:8443/wsg/api/public/query/client" target="_blank"&gt;https://{host}:8443/wsg/api/public/query/client&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;A href="https://{host}:8443/wsg/api/public/alert/event/list" target="_blank"&gt;https://{host}:8443/wsg/api/public/alert/event/list&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;However, the following API endpoints return 403 error saying "Lack of privilege":&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;A href="https://{host}:8443/wsg/api/public/aps" target="_blank"&gt;https://{host}:8443/wsg/api/public/aps&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;https://{host}:8443/wsg/api/public/dhcpData/dhcpPools/{apMac}&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Do I have to grant any other permission to the group?&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;A href="https://community.ruckuswireless.com/t5/SmartZone-and-Virtual-SmartZone/REST-API-Permission-Denied-Error-When-Accessing-aps-Endpoint-on/m-p/110744/highlight/true#M6057" target="_blank"&gt;https://community.ruckuswireless.com/t5/SmartZone-and-Virtual-SmartZone/REST-API-Permission-Denied-Error-When-Accessing-aps-Endpoint-on/m-p/110744/highlight/true#M6057&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;This guy said that the group permission should be on the top-level system domain, but I cannot do that here:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="sayedtaban8_1-1770350125730.png" style="width: 400px;"&gt;&lt;img src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/16913i34FFF746470CAC31/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="sayedtaban8_1-1770350125730.png" alt="sayedtaban8_1-1770350125730.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;If I click "System", all 4 domains are moved to right automatically.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Please help me!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;However,&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Fri, 06 Feb 2026 03:55:43 GMT</pubDate>
    <dc:creator>sayedtaban8</dc:creator>
    <dc:date>2026-02-06T03:55:43Z</dc:date>
    <item>
      <title>Permission Issue with SUPER_ADMIN role</title>
      <link>https://community.ruckuswireless.com/t5/SmartZone-and-Virtual-SmartZone/Permission-Issue-with-SUPER-ADMIN-role/m-p/112893#M6104</link>
      <description>&lt;P&gt;vSZ version:&amp;nbsp;6.1.2.0.487&lt;/P&gt;&lt;P&gt;I created an administrator called `apiuser` and added to a group called `WiFi API Group`. Of course, SUPER_ADMIN role is granted to that group(contains ALL domains):&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="sayedtaban8_0-1770349592073.png" style="width: 400px;"&gt;&lt;img src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/16912i6216FE7BE9F3098C/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="sayedtaban8_0-1770349592073.png" alt="sayedtaban8_0-1770349592073.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;By using this user's credential, I was able to login and call some APIs:&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;A href="https://{host}:8443/wsg/api/public/query/zone" target="_blank"&gt;https://{host}:8443/wsg/api/public/query/zone&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;A href="https://{host}:8443/wsg/api/public/query/ap" target="_blank"&gt;https://{host}:8443/wsg/api/public/query/ap&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;A href="https://{host}:8443/wsg/api/public/query/client" target="_blank"&gt;https://{host}:8443/wsg/api/public/query/client&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;A href="https://{host}:8443/wsg/api/public/alert/event/list" target="_blank"&gt;https://{host}:8443/wsg/api/public/alert/event/list&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;However, the following API endpoints return 403 error saying "Lack of privilege":&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;A href="https://{host}:8443/wsg/api/public/aps" target="_blank"&gt;https://{host}:8443/wsg/api/public/aps&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;https://{host}:8443/wsg/api/public/dhcpData/dhcpPools/{apMac}&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Do I have to grant any other permission to the group?&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;A href="https://community.ruckuswireless.com/t5/SmartZone-and-Virtual-SmartZone/REST-API-Permission-Denied-Error-When-Accessing-aps-Endpoint-on/m-p/110744/highlight/true#M6057" target="_blank"&gt;https://community.ruckuswireless.com/t5/SmartZone-and-Virtual-SmartZone/REST-API-Permission-Denied-Error-When-Accessing-aps-Endpoint-on/m-p/110744/highlight/true#M6057&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;This guy said that the group permission should be on the top-level system domain, but I cannot do that here:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="sayedtaban8_1-1770350125730.png" style="width: 400px;"&gt;&lt;img src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/16913i34FFF746470CAC31/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="sayedtaban8_1-1770350125730.png" alt="sayedtaban8_1-1770350125730.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;If I click "System", all 4 domains are moved to right automatically.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Please help me!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;However,&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 06 Feb 2026 03:55:43 GMT</pubDate>
      <guid>https://community.ruckuswireless.com/t5/SmartZone-and-Virtual-SmartZone/Permission-Issue-with-SUPER-ADMIN-role/m-p/112893#M6104</guid>
      <dc:creator>sayedtaban8</dc:creator>
      <dc:date>2026-02-06T03:55:43Z</dc:date>
    </item>
  </channel>
</rss>

