KorhanK.64585 (Customer) asked a question.
Hi Okta Community,
We are encountering an issue with the /api/v1/apps endpoint and are hoping someone might have some insight.
The Problem:
We are making API calls to /api/v1/apps using API tokens. For some of our users, these calls work perfectly. For other users, the API consistently returns the following 404 error:
{
"status": 404,
"message": "Resource not found"
}
This happens both when querying for the entire list of apps (GET /api/v1/apps) and when trying to access a specific application (GET /api/v1/apps/{appId}).
What We've Checked:
Okta Domain: We have confirmed the correct Okta domain is being used in the API requests.
API Token: We have verified the Authorization header and the API token itself are correctly formatted and are valid.
Since the same request works for some users and not others, we believe the issue is related to user-specific permissions rather than a general configuration problem.
Our Question:
Does anyone have information about what specific user-level configurations could cause the /api/v1/apps endpoint to return a 404 "Resource not found" error? We suspect it might be related to the permissions of the user who created the API token.
Thanks in advance for your help!
Hello @KorhanK.64585 (Customer) Thank you for posting on our Community page!
If the users making the API calls have different level of admin and permissions this would be expected behaviour. You can check our doc below with the permissions of each admin level and what they can do and what they can't:
https://help.okta.com/en-us/content/topics/security/administrators-admin-comparison.htm
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Hi @paul.stiniguta1.508386743840768E12 (Okta, Inc.) ,
We are using the same endpoint (the 'users' endpoint) and filtering it by userId to get individual user information. The error does not happen in that case.
Thank you for your help.
Hello @KorhanK.64585 (Customer) It's not about the endpoint/API calls that you are making. It's more about the administrative level you are using on each account. If a different admin, with lower permissions does the same call he might have a different result as they would not have the permissions to make the call.