Self-service BI API fails with access denied error when updating custom properties on published apps

BA/BI Qlik Sense
, , , , , , , ,
1

I’m trying to automate custom property updates for our self-service BI governance using the Qlik Sense 2020 Repository API, but getting persistent access denied errors even though I’m using a service account with RootAdmin privileges.

The API response:


HTTP 403 Forbidden
{"errors": [{"code": "ACCESS_DENIED",
"message": "User lacks required permissions for custom property update"}]}

We’re trying to automatically tag published apps with department and data classification properties based on their content. The service account can read custom properties fine, but cannot write/update them on existing apps. API security rules seem to be blocking the operation despite the RootAdmin role.

I’ve verified the custom property permissions in QMC and they allow updates. The service account setup must be missing something specific to custom property modifications. Has anyone encountered this with governance automation workflows?

2

Be careful modifying default security rules. Best practice is to create a new custom security rule specifically for your automation service account. This way you don’t accidentally grant broader permissions than needed. The rule should target the CustomProperty resource type and allow Update action for your service account user.