In Flowable IDM, I have 10 users added to a group, say Manager_Group. In privileges tab, I allow access to the REST Api for the Manager_Group. When I try to access the REST API using one of the users from Manager_Group, I get Forbidden error. Can’t the users of a group access the REST API if privilege is given to at group level ?
Yes, that sounds like it should (but haven’t tested it). And it works when you give the privilege to a user directly?
Yes. It works perfectly fine when assigned to a user directly.
One more observation I found was, group privileges work for other applications(Modeler, Task). It doesn’t work for REST API alone.
I can verify that I am seeing this exact same thing.