I am trying to upload a file using ARIS Document Storage API.

I followed the instructions in this topic:

ARIS Document Storage API - how to use it | ARIS BPM Community (ariscommunity.com)


The ARIS API response is "You do not have the privileges required for this action."

We tried setting read and write access to the user to the top level folder in the storage but still getting the same error. 

Could someone advise how exactly to grant these privileges to upload with the API?

Can it also be some issue with the request?  


The response from the API:

HTTP/1.1 400 400
Date: Mon, 19 Sep 2022 07:49:48 GMT
Server: Apache
Content-Encoding: UTF-8
Content-Length: 56
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Connection: close
Content-Type: text/plain

You do not have the privileges required for this action.



by Veronika Ellermann
Badge for 'Supporter' achievement
Posted on Tue, 09/20/2022 - 14:41

Hi Ivan,

I don't know the exact priviledges that are required for the API. However, I would think that it is related to http(s)://[your server]/#default/adminUsers/u.usermanagement.permissions (just by the error message you receive).

My first guess would be to activate the document administrator priviledge. 

Hope this helps.



by Ivan Ivanov Author
Posted on Wed, 09/21/2022 - 17:58

In reply to by Vee_ARIS

Thank you Veronika, 

Unfortunately, it didn't work. 

by Ivan Ivanov Author
Posted on Wed, 09/21/2022 - 20:54

I think I found what is causing the issue. My code was using the same token for GET and POST requests to the Document Storage API but it seems different licenses are required for these requests. And it had only 3 parameters - token, name, password. 

It seems the token request requires additional parameter key. I will need to find out if my company have the required license for mobile uploads and to provide the mobile key to the token. 

                "tenant": "default",
                "name": "system",
                "password": "abc",
                "key": mobileAPIKey
by Ivan Ivanov Author
Posted on Mon, 09/26/2022 - 08:59

Does anyone know if it is still required to provide 

"key": mobileAPIKey

in the token request for uploading to ARIS Document Storage? 

by Runé Becker
Badge for 'Mastermind' achievement
Posted on Mon, 09/26/2022 - 11:06

In reply to by ivan.ivanov4

Dear Ivan,

Since ARIS 10.0 SR12 there is no longer an API key needed to request an UMC token which enables access for further API requests.

In the UMC there exist both API calls, the old/obsolete one where an API key is needed, and right to it the new one where that parameter is no longer required: /apidocs/swagger-ui/index.html?url=/umc/apidocs/swagger.json


by Ivan Ivanov Author
Posted on Mon, 10/10/2022 - 10:57


Thanks everyone, the issue was solved.

Our user needed minimum ARIS Connect Designer license privileges.



Featured achievement

Say hello to the ARIS Community! Personalize your community experience by following forums or tags, liking a post or uploading a profile picture.
Recent Unlocks
  • Profile picture for user frankweise
  • Profile picture for user Henrik Buckler
  • Profile picture for user UffeK
  • SS
  • MZ
  • PacMan


icon-arrow-down icon-arrow-cerulean-left icon-arrow-cerulean-right icon-arrow-down icon-arrow-left icon-arrow-right icon-arrow icon-back icon-close icon-comments icon-correct-answer icon-tick icon-download icon-facebook icon-flag icon-google-plus icon-hamburger icon-in icon-info icon-instagram icon-login-true icon-login icon-mail-notification icon-mail icon-mortarboard icon-newsletter icon-notification icon-pinterest icon-plus icon-rss icon-search icon-share icon-shield icon-snapchat icon-star icon-tutorials icon-twitter icon-universities icon-videos icon-views icon-whatsapp icon-xing icon-youtube icon-jobs icon-heart icon-heart2 aris-express bpm-glossary help-intro help-design Process_Mining_Icon help-publishing help-administration help-dashboarding help-archive help-risk icon-knowledge icon-question icon-events icon-message icon-more icon-pencil forum-icon icon-lock