Setting up API to do a Migration

Question

I have followed this guide for the migration scripts. 
 Sophos Central API Academy 2024 sample scripts 
 And I followed this to setup the migration 
 https://docs.sophos.com/central/enterprise/help/en-us/Configure/SettingsAndPolicies/GlobalTemplates/GeneralSettings/DeviceMigration/index.html#requirements 
 
 But when I run the API script, I get a 403 error trying to set the migration on the destination. Basically line 179 of X01 Device Migration Start script. Does it matter what Role the API Credentials Management role is? I have it set to Service Principal Management. 
 
 Thoughts?

Rutvik Chavda · Accepted Answer

Hello, Brian B , 
 We appreciate your reaching out to the Sophos Community Forum. 
 Please refer to this information if that helps you: 
 
 The role assigned to the API credentials is crucial. If it's set to "Service Principal Management," it might not have the necessary permissions to perform migration tasks. Ensure the role has sufficient access rights to the source and destination tenants. Roles like "Service Principal Super Admin" or equivalent permissions are often required for migration operations. 
 Double-check the API credentials being used. Ensure that the client_id and client_secret are correct and correspond to the appropriate tenant. Also, verify that the credentials aren&rsquo;t expired. The credentials (client_id and client_secret) are valid for 36 months (3 years) from the time they&rsquo;re created. After expiration, they can no longer be used to authenticate API requests, and you&rsquo;ll need to generate new credentials. 
 Confirm that the required headers, such as X-Partner-ID or X-Tenant-ID , are correctly included in the API request. These headers must match the authorized account details. 
 The destination tenant must allow migrations. Check if the destination tenant has the necessary configurations and permissions turned on for migration. 
 Please refer to this article for more information: 
 Common Troubleshooting steps for Sophos Central API errors 
 
 Let me know if you need any further help. 
 Regards,

Setting up API to do a Migration

Top Replies