You’ll also want to go to the Global Menu (hamburger menu) -> Policies and make sure that your nodes have access to fetch site-to-site details there. I forget the exact name of the policy but it should be pretty obvious looking through that list.
If that is setup properly and you’re still seeing the issue, I would recommend taking a look at the nifi-user.log and it should show you exactly which endpoint is returning the 403 and the exact username that is being used. So that’ll help to clarify what permissions may be missing. Thanks -Mark On May 18, 2021, at 1:03 PM, Mr. Spock <mgaspere...@gmail.com<mailto:mgaspere...@gmail.com>> wrote: Hi All! I'm trying to develop a process group to capture & and process bulletins, but I'm receiving this error: Unable to refresh remote group peers due to: response code 403:Forbidden with explanation: null What I've done so far: * Created the Restricted SSL context, using the keystore + truststore that I'm using at cluster level. It works properly. <Screenshot from 2021-05-18 12-33-02.png> * Created the S2SBulletinReportingTask <Screenshot from 2021-05-18 13-58-10.png> ( I've also tried with HTTP transport protocol). I also did: * Created a security group which contains every cluster node (group name: ClusterMembers). * At Canvas Root Level, give "view component" permission. * At ProcessGroup Level, I've created the Remote Input Port. * At Remote Input Port, set the "Receive Site to Site Permission" to my ClusterMembers group. Any Idea of what I'm missing? Thanks in advance!