Log Analyzer Error_RestApiAutorization

[Kean]

Hi Everyone,
Has anyone else encountered this error? I noticed "RestApiAuthorization" errors in the log analyzer, but I currently don't have any API integrations or webhooks set up.
Here are the error details for reference:

{ "Message": "Unauthorized Access Attempt", "HttpStatusCode": "Unauthorized", "MinimumRoleRequired": "User", "AppTemplateName": "Operation": "RestApiAuthorizationCheck", "Result": "Failure" }

Thank you and have a great day!

[Aurélien · Accepted solution]

This issue may not necessarily be related to the API call you made. It's possible that one of your users is not connected with their Google email address and is trying to access the application. They should log in with their Google account and try clearing their browser cache.

[PauloExpert]

This error message, RestApiAuthorizationCheck, suggests that an unauthorized API call is being made to your app, even though you haven’t explicitly set up any API integrations or webhooks. Here are some possible causes and solutions:

Possible Causes

1. Unintentional or Forgotten API Calls

If you previously experimented with API integrations or webhooks, leftover configurations might still be triggering calls.

Check your app for hidden or forgotten automation rules.

2. Third-Party Tools or Services

If any external service or tool (e.g., integrations, plugins, or connectors) has access to your app, it might be attempting unauthorized API calls.

3. Testing or Debugging Scripts

A script or API client might still be configured to interact with your app.

4. Unauthorized Access Attempt

Someone might be trying to access your app’s API endpoints without proper credentials.

5. Incorrect Security Role

The error specifies that the "MinimumRoleRequired" is "User". If a user account with insufficient permissions is making API calls, this error will appear.

How to Resolve

1. Check Audit Logs

Navigate to your app's Audit Logs or Log Analyzer.

Look for the source of these API calls:

IP addresses

User accounts

Timestamp of events

This will help identify whether these are internal or external requests.

2. Verify Users and Permissions

Check all users who have access to your app.

Ensure their permissions match their roles and that no unnecessary accounts exist.

3. Review Automation Rules

Check your app for:

Scheduled reports

Bots

Workflows

Ensure no API integrations or webhooks are unintentionally configured.

4. Secure Your API

Ensure that API access is disabled unless explicitly needed.

If API access is enabled:

Use secure API keys.

Restrict IP ranges (if supported).

5. Test Your App

Temporarily disable all automation (bots, workflows, integrations).

Monitor the logs to see if the errors stop. If they do, the issue lies in your automation setup.

6. Monitor External Services

If any external tools have access to your app, verify their configurations.

Disconnect any unused services or integrations.

If none of the above works, consider contacting support for your platform to investigate further. Provide them with the log details, including timestamps and any other relevant information. 

[Kean]

Thank you so much on your inputs. Will check on this and collaborate with the team.