DevNet Always on Sandbox - Permissions issue

[hoylandpaul]

Hi,

I'm trying to add a device to the always on SandBox for DevNet but getting a 403 response back:-

{

    "message": "Role does not have valid permissions to access the API"

}

Any ideas?

thanks

Paul

[bigevilbeard]

You don't say which sandbox you are using, so taking a guess this is the DNAC one. This maybe the same issue - https://community.cisco.com/t5/networking-blogs/authenticating-rest-api-calls-to-dnac-getting-started/bc-p/3678811/highlight/true#M365

HTH

[hoylandpaul]

Hi,

Yes it is the DNAC sandbox that I'm using. A post to get a token works and a GET on /network-device works but when I try a POST on /network-device to add a device I get that 403 response.

thanks

Paul

[bigevilbeard]

Thanks - it could be that our always-on DNAC sandbox are mostly read-only. You might wish to reserve a DNAC sandbox which will give you full admin rights and privileges.

HTH

[hoylandpaul]

Ah, OK, that makes sense.

Is there only 1 DNAC sandbox that it is possible to reserve? Lab numbers 2 and 3 keep saying "Cannot be found"?

thanks

Paul

[bigevilbeard]

There should be three to reserve unless there are issues or they have been taken out for planned work etc..