Asset Import - Keysafe Key setup

[Archana]

Hi,
I am trying to upgrade Asset import tool from v1.8.1 to v4.2.2. However there is a change in the configuration file used for import.
In v1.8.1 the API key, instance ID and database authentication details are hardcoded, but in v4.2.2, it uses keysafe key for database authentication.

When I am trying to run the import the log file shows below error message.
"API call to retrieve key information from Keysafe failed: The API key specified is not authorized to invoke this operation (admin:keysafeGetKey), please contact your system administrator for assistance".
Anyone knows what needs to be done? Any setup missing or anything needs to be added?

[Steve Giller]

If you review the Authentication page of the documentation admin:keysafeGetKey is specified as a required API Key Rule, these are added when you create the API Key that you subsequently use to authenticate the Import Tool in the First Run stage of setting up the Tool.

If the API Key is not created with the required API Key Rules the APIs cannot be run and you will get an error similar to the above.

[Archana]

Thanks @Steve Giller

We already have an API key set for AssetImport and the Rules added for the AssetImport API key are the below as specified in the Authentication for AssetImport.
 

Do we need to add admin:keysafeGetKey along with these rules?

[Archana]

@Steve Giller
I have added admin:keysafeGetKey to the existing rules (above mentioned screenshot) for AssetImport API key.
When I am trying to run the import, it is giving the below error.

[ERROR] Unable to run Query [getUserAccountsList] The following rights [executeStoredQuery] in Group A are needed to invoke the method data::queryExec
2023/11/10 11:50:33 getUserAccountsList Count: 0
2023/11/10 11:50:33 Users Loaded: 0
2023/11/10 11:50:33 Caching Site Records from Hornbill...
2023/11/10 11:50:33 [ERROR] Unable to Query Sites List The user 'AssetImport' has the privilege level 'none' for the 'com.hornbill.core' application but requires 'user' to invoke this operation: getSitesList
2023/11/10 11:50:33 Caching Application Records from Hornbill

I am using the 'conf_example_db_sccm' template given with the download file for v4.2.2.
can you suggest how to resolve this error.

I am trying to update directly from v1.8.1 to v4.2.2 is there anything that I am missing to setup since I have missed many versions in between.

[Steve Giller]

@Archana Have you followed all the steps on the Authentication page?

[Archana]

@Steve Giller
Thanks for the reply Steve. Yes. I have added User Roles and Asset management User roles (which were  missing)to the account we are using and now log shows '[ERROR] Unable to run Query [getUserAccountsList] You need the right 'sys.a.manageUsers' in order to invoke the query: '

Are there any other roles or rules needs to be added.

[Archana]

@Steve Giller
Could I please ask for an update.