ConnectWise API Permission Error - Insufficient Security

Permission Error – You do not have security permission to perform this action

Error: You do not have security permission to perform this action

This error originates from your PSA tool — most commonly ConnectWise — and indicates that the API user doesn’t have sufficient permissions to complete the requested action (e.g., accessing or modifying agreements).


Cause: In many cases, the API permissions are scoped to specific agreement types, and the agreement being accessed is a parent agreement or uses a different type not included in the API security role.

Resolution

  1. Log into your PSA (e.g., ConnectWise)
  2. Navigate to the API Member or API Role section
  3. Review the permissions for Agreements:
    • Ensure the API user has access to all relevant agreement types
    • Confirm access to parent/child agreements if used

Refer to this guide for setup instructions:ConnectWise API Configuration

    • Related Articles

    • PSA posting and proration date errors

      PSA posting and proration date errors This article explains common PSA posting errors that happen when Sync 365 updates Microsoft 365 licence quantities, Azure billing, or custom billing items into your PSA agreement or contract. These errors are ...

    • Consent Error – Administrator Has Not Granted Consent

      Error: The user or administrator has not consented to use the application This error occurs when the Sync 365 app hasn’t been granted proper consent within the customer tenant — either because the app was deleted, GDAP permissions are misconfigured, ...

    • Authorization Error – Unsupported Token or Access Forbidden

      Error: Authorization Error – Unsupported Token or Access Forbidden When the error is for a specific tenant: This error means that your Sync 365 account does not have the required permissions to connect to the customer tenant. Cause: Your GDAP ...

    • Management Role Error – User Not Assigned Roles

      Error: The user isn't assigned to any management roles This error means the delegated admin account does not have the required directory roles assigned within the customer tenant — typically via the GDAP security group. Cause: The delegated admin ...

    • Sync error log has "Addition Object Invalid" error

      If you are having issues with a license syncing to your agreement and you are seeing the error "Addition Object Invalid" this is typically caused by a mismatch in the effective date. This should be a rare occurrence, but you can check your agreement ...