CDC - Permissions error only in a specific API - accounts.session.verify

[Manpreet_11]

Hi, I am working on a use case where I need to check whether a user session is still active before doing some updates on user behalf from Backend.

I am planning to use accounts.session.verify REST API for validating this. The application receieves the following error.

Request

curl -X POST \
    https://accounts.gigya.com/accounts.session.verify \
    -H 'content-type: application/x-www-form-urlencoded' \
    --data-urlencode "apiKey=[Enter-Your-API-Key-Here]" \
    --data-urlencode "secret=[Enter-Your-Secret-Key]" \
    --data-urlencode "userKey=[Enter-Your-Application/User-Key]"\
    --data-urlencode "accessToken=The accessToken to verify" \

Response

{
  "callId": "147a07143f6f43ad8367abdc84dbd58a",
  "errorCode": 403007,
  "errorDetails": "Invalid namespace 'accounts.session' or method 'verify' or you do not have the required permissions to call it. ",
  "errorMessage": "Permission denied",
  "apiVersion": 2,
  "statusCode": 403,
  "statusReason": "Forbidden",
  "time": "2024-09-10T16:27:34.284Z"
}

The credentials I am using i.e. API key, User Key, Secret - I can correctly able to hit other APIs e.g. accounts.getJWT or accounts.getAccountInfo

I want to know are there special permissions required for calling this API. If yes, what are those and how those can be provided.