errore forbidden 403 per https://api.central.sophos.com/organization/v1/tenants

Question

Hi, I would like to use the api api.central.sophos.com/.../tenants to receive the list of all tenants present in my console (sophos partner), it is not working. 
 I obviously pass the organization-id obtained from the whoami api, any ideas?

DevMD · Answer

Hi, 
 when you used the whoami-api, what value did you receive for " idType "? As you stated, that you are a sophos Partner I suspect that you might have received " partner " as value. 
 In that case instead of the organization-scoped enpoint for tentants ( https://api.central.sophos.com/organization/v1/tenants ) try to use the partner-scoped endpoint: https://api.central.sophos.com/partner/v1/tenants 
 For this enpoint you also need to pass in the "X-Partner-ID"-header instead of the "X-Organization-ID"-Header