Appneta Authentication

generated: '2026-09-16'
method: searched
source: https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/appneta/GA/integrate/api/api-access-tokens.html
docs: https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/appneta/GA/integrate/api/api-access-tokens.html
note: >-
  Re-verified 2026-09-16. The prior source URL (.../integrate/api-access-tokens.html)
  now returns 404; the page moved under .../integrate/api/. No public OpenAPI is
  available to derive securitySchemes from (the interactive OpenAPI 3.0 interface is
  served per application cluster and returns 401 anonymously), so this profile is
  taken from the TechDocs pages for API v3, API v4 and API Access Tokens.
summary:
  types: [apiKey]
  api_key_in: [header]
  oauth2_flows: []
schemes:
- name: ApiAccessToken
  type: apiKey
  in: header
  header_name: Authorization
  value_format: Token <api_access_token>
  description: >-
    AppNeta API requests are authenticated with an API access token passed in the
    Authorization request header with the literal scheme word "Token", e.g.
    `Authorization: Token <token>`. Access tokens are the documented and recommended
    authentication method for API v3 and v4; they give greater control than basic
    authentication with a username and password, and single sign-on users can use
    them without a local account.
  example_request: >-
    curl -X GET -H "Authorization: Token <token>" -H "Accept: application/json"
    "https://<application_cluster>.pm.appneta.com/api/v3/path"
  sources: [docs]
token_management:
  created_in: AppNeta > Manage Access Tokens > Create Token
  shown_once: true
  expiry: configurable expiration date or Never; revoked automatically at expiration
  expiry_notification: email two weeks before a token expires
  scoping:
  - role/permissions less than or equal to the creating user's permissions
  - organization membership, either a static selection or dynamic membership
  immutable: true
  revocation:
  - manual revoke by the creator or an Organization Admin
  - automatic at expiration
  - automatic when the creating user is deleted
  limitations:
  - not available to users with custom roles
  - /v3/observer endpoints require a token with dynamic organization membership
  docs: https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/appneta/GA/integrate/api/api-access-tokens.html
other_surfaces:
- api: Monitoring Point Admin API
  auth: interactive Swagger UI on the Monitoring Point (https://<hostname-or-ip>/swagger/index.html), reachable only from the Monitoring Point's local network or via Web Admin
  docs: https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/appneta/GA/integrate/api/monitoring-point-admin-api.html
- api: AppNeta On-Prem Admin API
  auth: AppNeta login with a user that holds the System Config add-on privilege (https://<on-prem-host>/admin)
  docs: https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/appneta/GA/integrate/api/api-on-prem.html
error_codes:
- {status: 401, message: Full authentication is required to access this resource, meaning: no credentials were passed}
- {status: 401, message: Bad credentials, meaning: credentials were passed but are invalid}
- {status: 401, message: Failed to decode basic authentication token, meaning: an encoded token could not be decoded; recreate the token}
- {status: 403, message: Access is denied, meaning: no permission for the resource, e.g. the wrong organization}