Permissions required for web services
A special WorldServer user type permission is required to run all SDK web services. By default, only administrators have this permission, but they can grant it to other trusted user types, if necessary.
This permission is called Web Services. You can grant it or remove it from the User Type: <name> page (), where <name> is the name of the user type. Anyone with the Web Services permission can use most of the APIs exposed in the system SDK web services library over the Internet, so be careful when granting this permission.
Another permission, Can remove objects using Web Services, protects all the Remove, Delete, and Cancel web service APIs. By default, only administrators can use any web service APIs that fall into this category. Users types who are granted the Web Services permission without having the Can remove objects using Web Services permission can use only the web service APIs that do not remove objects or cancel ongoing activities.