I have this API endpoint trigger created and one API response argument is UUID of a Incident, when im trying to read the incidents with the UUID its giving following error.
"Access Denied. URL: https://localhost/api/query/incidents?%24limit=30&%24partial=true Call for URL: https://localhost/api/query/incidents failed with status code 403"
as i understand when find record is called from an API endpoint trigger it doesn't have permission to query the alerts or incidents. is there a workaround for this.
Are you using an appliance or API key to authenticate? If so, you have to give permissions to allow the API key access to the incidents and/or alerts.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2026 Fortinet, Inc. All Rights Reserved.