Access Denied Error on Transmit Endpoint

worldwida

@SysAdmin We have gone through the community and have not been able to get a resolution for this, if there is another thread that addresses this, kindly assist us with the link. Thank you.

SysAdmin

worldwida Please confirm that you are using the Access Point Provider's Keys for this call

zhift

@SysAdmin I think there's some clarity needed here. It appears, from what i am hearing, that the standard taxpayer credentials and the standard endpoint listed in the API Gateway tab in a taxpayer's account will not suffice to trigger the transmit process as this is part of fiscalization that can only be done by APPs. And the documentation itself lists those processes under APPs but does not say anything about what the SI would need to do to plug in to the transmit process via their chosen APP. Rather, SI's are frantically calling endpoints that should be for APP-level credentials and continue to hit the access denied error, and no one has provided clarity on how to move forward.

This is a huge gap in the documentation of this process and this needs to be clarified. Integrators need to know which endpoint to call to alert the APP to initiate transmission of their invoices since this cannot be done directly based on the series of posts about this issue.

SysAdmin

Dear zhift,

You are spot on with your points. The documentation clearly distinguishes between the roles of System Integrators (SIs) and Access Point Providers (APPs).

As we have emphasized in previous discussions within this community, the SI’s role is strictly tied to the taxpayer — they function as solution providers, which is why calls must be initiated using the taxpayer’s keys.

Kindly refer to earlier conversations in this community for more context on this subject.

babatopeajepe

Hey @SysAdmin “Do you mean the system integrator requires an access point provider to handle the transmission? Can you clarify this and share a link to where it is documented?

SysAdmin

babatopeajepe This is correct and have been previously established in this community.

MBSTester

Hi @SysAdmin

There is still no real response as to how to navigate the /invoice/transmit endpoint, it's a real issue now as we can only sign and can't transmit.

Please give a clear and detailed flow for how to use the /invoice/transmit endpoint.

All credentials available on the UI returns "public_message": "access denied. user does not have access to this resource"
Please note that the APP activated is the MBS Default, so i assume we should be able to as well use the /invoice/transmit

Kindly help.

SysAdmin

Dear MBSTester,

At the moment, transmission can only be done through an accredited Access Point Provider (APP). Therefore, even if you are currently on the default APP, you will not be able to transmit invoices.

Management is reviewing this limitation and will provide further updates in due course. In the meantime, you are advised to connect with one of our accredited Service Providers to proceed with transmission.

zhift

SysAdmin As we have emphasized in previous discussions within this community, the SI’s role is strictly tied to the taxpayer — they function as solution providers, which is why calls must be initiated using the taxpayer’s keys.

Thank you for your feedback but your response here doesn't specifically answer my questions. SI's assists the task payer to integrate with the MBS eInvoice platform and part of this process requires the taxpayer to validate, sign and transmit their invoices. The SI has assisted them to achieve the first two using their credentials but the third step is where the problem is.

What we need is direction to the taxpayer about how to get their invoices transmitted after validation and signing. This has nothing to do with the SI's because the taxpayer's credentials is what is being rejected here not that of the SI. The integration I am handling is taxpayer to mbs without any integrator in-between so the conversation about SI's access is not at play here.

mileke

Only APPs can make use of the /transmit endpoint. SIs can't, regardless of which taxpayer they are integrating for.

zhift

mileke You are missing the point entirely if your reply is targeting my post. I have no doubt that SI's cannot transmit. What i am asking is how taxpayers can access the transmit step. Obviously they have enabled a default APP on their account so the APP is supposed to handle the transmit on their behalf as only a handful of taxpayers have the funds/technical capabilities to onboard as APPs. The question is how are we supposed to access the endpoint of the APP we selected as default to request the transmit which is what i think the process is designed to follow. This is a basic question that anyone should understand.

SysAdmin

Dear zhift,

A taxpayer can only transmit using the accredited Access Point Providers.

Please note that the MBS default only allows taxpayers to perform the following actions:

Receive invoices transmitted to them by the seller on their FIRSMBS portal.
Automatically confirm receipt of all invoices sent by the seller.
Download invoices using the designated download endpoint as a buyer.
Update payment status for received invoices as a seller.

(Coming soon – subject to management approval): Ability for taxpayers (seller) to report (for fiscalization) paid transactions using the report endpoint while on MBS Default

« Previous Page