Authorization

Automation REST APIs apply authorization and permission checks based on access you have within the product you are invoking the API on.

For many APIs this will require being a site- or container-level admin.

For other APIs (e.g. manual rule APIs) permission checks will be applied based on the object(s) that you are invoking the API on (e.g. the issue you are fetching the manual rules for, for example).