Permission Issue with SUPER_ADMIN role

[sayedtaban8]

vSZ version: 6.1.2.0.487

I created an administrator called `apiuser` and added to a group called `WiFi API Group`. Of course, SUPER_ADMIN role is granted to that group(contains ALL domains):

By using this user's credential, I was able to login and call some APIs:

https://{host}:8443/wsg/api/public/query/zone

https://{host}:8443/wsg/api/public/query/ap

https://{host}:8443/wsg/api/public/query/client

https://{host}:8443/wsg/api/public/alert/event/list

However, the following API endpoints return 403 error saying "Lack of privilege":

https://{host}:8443/wsg/api/public/aps

https://{host}:8443/wsg/api/public/dhcpData/dhcpPools/{apMac}

Do I have to grant any other permission to the group? 

https://community.ruckuswireless.com/t5/SmartZone-and-Virtual-SmartZone/REST-API-Permission-Denied-E...

This guy said that the group permission should be on the top-level system domain, but I cannot do that here:

If I click "System", all 4 domains are moved to right automatically.

Please help me!

However, 

[naresh_kumar_74]

Hello @sayed

Thank you for reaching out to us. 

Create Administrator Profile: Navigate to Administration > Admins and Roles > Roles. Create a new role with read/write permissions for Services (specifically DHCP & NAT).
Create User: Navigate to Administration > Admins and Roles > Admins and create a new user, assigning them the role created in Step 1.
Configure DHCP Service: Go to Services > DHCP & NAT > DHCP Setting (AP), select the zone, and enable the DHCP service for specific APs. 
Please find the below document for the API guide and search with DHCP as keyword shows all API calls for DHCP pool access, configuration etc.
https://support.ruckuswireless.com/documents/4645-smartzone-6-1-2-lt-gd-public-api-reference-guide-v...

Regards, 

Naresh Kumar