How do I create an API user which is only allowed to send SMS

[peter12]

Hi,

on the Mobile POST/GET it was able to define a user for sending SMS.
As the login data is setted up in a config file I do not want to have all rights assigned to this SMS user.

I would need to define a user which is only allowed to send an SMS via the API.
This means:
Login
get Modem Status
send SMS
Logout

I was having a look at creating a new user group.
This is based on Webinterface and it is impossible to see what you select.

Right now I have the api access only working with the admin user.
Please let me know if there is a solution for it. Thanks.

[Martynas]

Hello,

Apologies for the delay. Yes, it’s possible to create a dedicated user assigned to a custom group with permissions limited only to SMS message sending. To achieve this, you’ll need to:

1. Create a new user group, and in its permission settings, enable only the necessary SMS sending access rights, according to the settings provided in the screenshots below:
   

   
   
   
   

2. Once the group is created and saved, scroll down to the Add new user section, add a new user, and assign them to the previously created group:
   

   

This way, when your API user logs in with those credentials, they’ll have permissions exclusively for the specified SMS sending action.

I hope this helps, and if you have any additional questions, feel free to reach out.

Best regards,

[peter12]

Thanks,

I did exactly what you explained but it does not work.
This the log. The phone number was replaced by +number

Blockquote
2025-05-30 13:28:44,561 DEBUG Starting new HTTPS connection (1): 192.168.1.254:443
2025-05-30 13:28:45,108 DEBUG https://192.168.1.254:443 “POST /api/login HTTP/1.1” 200 None
2025-05-30 13:28:45,132 DEBUG {‘success’: True, ‘data’: {‘username’: ‘usersms’, ‘token’: ‘85eb3477cd24004fd362dad98cd4208a’, ‘expires’: 299}}
2025-05-30 13:28:45,132 DEBUG token: 85eb3477cd24004fd362dad98cd4208a
2025-05-30 13:28:45,133 DEBUG create_data: {‘data’: {‘number’: ‘+number’, ‘message’: ‘program V3.196.20 started’, ‘modem’: ‘1-1’}}
2025-05-30 13:28:45,136 DEBUG Starting new HTTPS connection (1): 192.168.1.254:443
2025-05-30 13:28:45,735 DEBUG https://192.168.1.254:443 “POST /api/messages/actions/send HTTP/1.1” 403 None
2025-05-30 13:28:45,802 DEBUG {‘success’: False, ‘errors’: [{‘source’: ‘Authorization’, ‘code’: 120, ‘error’: ‘Unauthorized’}]}
2025-05-30 13:28:45,806 DEBUG Starting new HTTPS connection (1): 192.168.1.254:443
2025-05-30 13:28:46,043 DEBUG https://192.168.1.254:443 “POST /api/logout HTTP/1.1” 200 None
2025-05-30 13:28:46,061 DEBUG {‘success’: True, ‘data’: {‘response’: ‘Logout successful’}}

How do I know which write access I selected as I only see the left part and not the important right part in the drop down box?
It is impossible or very time consuming to select it in the proper way, not seeing the full name.

I selected the second “Service> Mobile Utilites > Messages >..” after “Service> Mobile Utilites > Call Utilities” like on your screen shot.

BR
Peter

[peter12]

Hi,

it is the second from below.
Please see the screen shot.

BR,
Peter

[Martynas]

Hello,

For me, it worked when the first option below the Services > Mobile Utilities > Messages was selected on both Read and Write access.

Click to expand

Kind regards,

[peter12]

You maybe used a different way of sending the SMS.

I did this test on an older version of the firmware and used:
Services > Mobile Utilities > Messages > Send SMS message

Please see screen shot:

This is the second tab from below.
Anyway it works now. Thanks.