I’m integrating with the Sage 200 Extra API (v1, UK endpoint) to create and retrieve purchase orders, but every time I send a POST or GET request to
api.columbus.sage.com/.../pop_orders
I receive an HTTP 403 Forbidden response.
I’ve configured OAuth 2.0 correctly and included all required headers X-Site, X-Company and ocp-apim-subscription-key and verified the same token and headers work fine against the /suppliers endpoint.
Is there an additional header or API setting required specifically for the /pop_orders endpoints, or any extra steps to grant read/write access? Any guidance would be greatly appreciated.
