API Access Issue for Read-Only User Despite UI Access

SonarQube Cloud
1

ALM used: Azure DevOps

CI system used: Azure DevOps Pipelines

Error observed:
The user is authenticated via Azure DevOps, is a confirmed member of the organization, and can access projects via the SonarCloud UI without any issues.

However, when attempting to call the following API:
GET /api/projects/search?organization=ORG_KEY they receive this error response:
No organization for key 'ORG_KEY'

Steps to reproduce:

  1. The user signs in through Azure DevOps and is a confirmed member of the organization.
  2. They can access and browse projects through the SonarCloud UI without any issues.
  3. A valid API token is used.
  4. When calling the endpoint /api/projects/search?organization=ORG_KEY, they receive the above error.
  5. However, project-level API calls like: GET /api/project_analyses/search?project=PROJECT_KEY return data successfully, confirming that the user has access at the project level.

I’m trying to understand why the user can access projects via the UI and specific endpoints, but not via /api/projects/search, even though they appear to have all the necessary permissions. Any insight would be appreciated — thanks!

2

Hi there,

The endpoint GET api/projects/search requires organization-level admin permissions.

If your user doesn’t have these permissions you can use GET api/components/search instead.

1 Like
3

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.