Why do I receive an error when submitting a REST API request?

Environment:

REST API
Staff Profiles

Issue:

We receive this error when submitting a REST API request:

 "Not Allowed: Cannot perform requested function or action"

Resolution:

When using a custom object in a REST API request, you will see this error if your profile does not have "Read" permission for this custom object.

In the Oracle B2C Service console, from within your profile (Staff Management -> Profiles), click on Permissions and then Custom Objects. Add Read permission for your custom object. Click Save.

Cause:

Each time you create a custom object, profile permissions are disabled by default. Each must be enabled manually at the profile level.

For more information on profiles, refer to Answer ID 768: Profile Permissions.