Forum Discussion
DRay
07-21-2025Sisense Employee
Hello KlaudiaWEQS​,
Thank you for reaching out.
The 403 Forbidden error you are encountering when making POST requests to the settings endpoint, such as api/v1/settings/system, could be due to insufficient permissions or incorrect configuration in your Sisense instance.
- Permissions Issue: Ensure that the account you are using to make these API requests has the necessary permissions to update system settings. This might involve checking the roles and permissions assigned to the user or API token being used.
- CORS Configuration: To update the CORS Allowed Origins, you can use the Sisense UI by navigating to Admin > Security & Access > Security Settings > General, and then add your application's domain to the CORS Allowed Origins list. This is a recommended approach to manage CORS settings directly through the UI 1.
- REST API Usage: If you prefer using the REST API to add new domains to the CORS settings, ensure that the API endpoint is correctly configured and that the API token or user account has the appropriate permissions to make such changes. The REST API supports adding domains and even using wildcards to cover a range of domains 2.
By addressing these potential issues, you should be able to resolve the 403 error and update your CORS settings successfully. If the problem persists, consider reviewing the API documentation or reaching out to Sisense support for further assistance.