REST API call to Grafana endpoint fails with a 403 response for non-admin users.Issue <!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } A non-admin user with roles evt_mgmt_connector_instance_write, evt_mgmt_integration, itil, oauth_user, rest_service, snc_internal, snc_platform_rest_api_access, web_service_admin cannot access https://<instancename>.service-now.com/api/sn_em_connector/em/inbound_event?source=grafana, despite getting an OAuth token. Admins can access it, but non-admins get a 403 Forbidden error. Transaction logs show the details below. 2025-11-14 05:25:44 (966) API_INT-thread-3 C7DA6B8C8715FE100B2E620D8BBB35A4 txid=0fda278c8715 LocalhostTransactionLogger *** End #133421 /api/sn_em_connector/em/inbound_event, user: grafana, render_size: 105, total time: 0:00:00.030, processing time: 0:00:00.030, CPU time: 0:00:00.000, SQL time: 0:00:00.004 (count: 18), Total memory allocated: 5.11MB, source: 170.49.113.19, type: rest, origin scope: global , method:null, api_name:null, resource:null, version:null, user_id:edc45cb387bcb2142aec43fd0ebb356f, response_status:403 2025-11-14 05:25:44 (961) API_INT-thread-3 C7DA6B8C8715FE100B2E620D8BBB35A4 txid=0fda278c8715 TimingLogger DEBUG: #133421 [REST API] RESTAPIProcessor : REST Request Processing time total_time_to_now_micro_secs=27956 2025-11-14 05:25:44 (961) API_INT-thread-3 C7DA6B8C8715FE100B2E620D8BBB35A4 txid=0fda278c8715 TimingLogger DEBUG: #133421 [REST API] RESTAPIProcessor : End of Request Processing 2025-11-14 05:25:44 (961) API_INT-thread-3 C7DA6B8C8715FE100B2E620D8BBB35A4 txid=0fda278c8715 TimingLogger #133421 [REST API] RESTAPIProcessor : User Not Authorized 2025-11-14 05:25:44 (961) API_INT-thread-3 C7DA6B8C8715FE100B2E620D8BBB35A4 txid=0fda278c8715 AProcessor Security restrictions on RESTAPIProcessor 2025-11-14 05:25:44 (960) API_INT-thread-3 C7DA6B8C8715FE100B2E620D8BBB35A4 txid=0fda278c8715 AuthLog DEBUG: Auth: OAuth token includes useraccount scope, skip auth scope check 2025-11-14 05:25:44 (956) API_INT-thread-3 SYSTEM txid=0fda278c8715 AuthLog DEBUG: Auth: postAuth Policy check completed successfully with profile ID 7d80df243b3812103a293c8c24e45af3 2025-11-14 05:25:44 (956) API_INT-thread-3 SYSTEM txid=0fda278c8715 Sessions Session user set to grafana 2025-11-14 05:25:44 (956) API_INT-thread-3 SYSTEM txid=0fda278c8715 HTTPAuthSessionSetup HTTP authorization validated user 'grafana' And Service Account Session Initiated 2025-11-14 05:25:44 (955) API_INT-thread-3 SYSTEM txid=0fda278c8715 AuthLog DEBUG: Auth: started postAuth Policy check with profile ID 7d80df243b3812103a293c8c24e45af3 2025-11-14 05:25:44 (939) API_INT-thread-3 SYSTEM txid=0fda278c8715 AuthLog DEBUG: Auth: [OAuthTokenAuthenticator]:Authentication type Bearer 2025-11-14 05:25:44 (939) API_INT-thread-3 SYSTEM txid=0fda278c8715 AuthLog DEBUG: Auth: preAuth Policy check completed successfully with profile ID 7d80df243b3812103a293c8c24e45af3 2025-11-14 05:25:44 (939) API_INT-thread-3 SYSTEM txid=0fda278c8715 AuthLog DEBUG: Auth: started preAuth Policy check with profile ID 7d80df243b3812103a293c8c24e45af3 2025-11-14 05:25:44 (939) API_INT-thread-3 SYSTEM txid=0fda278c8715 AuthLog DEBUG: Auth: started authentication using auth profile 7d80df243b3812103a293c8c24e45af3 2025-11-14 05:25:44 (938) API_INT-thread-3 SYSTEM txid=0fda278c8715 AuthLog DEBUG: Auth: checking if global policy and internal API. policy: APIPolicy [Event Connectors API Access Policy:::::true:[aa40d7243b3812103a293c8c24e45ae2, 7d80df243b3812103a293c8c24e45af3, ddb0d3643b3812103a293c8c24e45a6e, f9fcbc303bf052103a293c8c24e45a61]:6974cbac3bb412103a293c8c24e45ace] 2025-11-14 05:25:44 (938) API_INT-thread-3 SYSTEM txid=0fda278c8715 AuthLog DEBUG: Auth: Request remote IP address:XXXXXX 2025-11-14 05:25:44 (938) API_INT-thread-3 SYSTEM txid=0fda278c8715 AuthLog DEBUG: Auth: Authorization header found: type Bearer 2025-11-14 05:25:44 (938) API_INT-thread-3 SYSTEM txid=0fda278c8715 AuthLog DEBUG: Auth: Request path:/api/sn_em_connector/em/inbound_event 2025-11-14 05:25:44 (934) API_INT-thread-3 SYSTEM txid=0fda278c8715 TimingLogger DEBUG: #133421 [REST API] RESTAPIProcessor : Finished initializing REST Request 2025-11-14 05:25:44 (934) API_INT-thread-3 SYSTEM txid=0fda278c8715 AuthLog DEBUG: Auth: ServletInputStreamWrapper created by Rest API processor 2025-11-14 05:25:44 (933) API_INT-thread-3 SYSTEM txid=0fda278c8715 TimingLogger DEBUG: #133421 [REST API] RESTAPIProcessor : URI Resolving Duration duration_micro_secs=135 2025-11-14 05:25:44 (933) API_INT-thread-3 SYSTEM txid=0fda278c8715 TimingLogger DEBUG: #133421 [REST API] URIHandler : Resolving URI: /sn_em_connector/em/inbound_event 2025-11-14 05:25:44 (933) API_INT-thread-3 SYSTEM txid=0fda278c8715 TimingLogger DEBUG: #133421 [REST API] RESTAPIProcessor : Request is wrapped for auth profile authentication 2025-11-14 05:25:44 (933) API_INT-thread-3 SYSTEM txid=0fda278c8715 TimingLogger DEBUG: #133421 [REST API] RESTAPIProcessor : Started initializing REST Request Release<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } All the supported API version Cause<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } The 403 Forbidden error occurred because the snc_internal role was missing from the RESTAPIProcessor ACL created for the execute operation, as shown below. Resolution<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } Add the snc_internal role to the ACL associated with the RESTAPIProcessor for the execute operation as shown below# https://<instancename>.service-now.com/nav_to.do?uri=sys_security_acl.do?sys_id=67b77e109f3102003d5c77a0942e7038 Related Links<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } Integrate Grafana events