The Management Interface web service is accessible by an authenticated user. An EPM user name and password is required to be able to invoke any of the web service methods.

The authorization is based on the role and features assigned to the EPM user invoking the web service. In order to be able to invoke a specific web service method, the EPM user account used must have permission to perform the same operation on the web page. For example, if an EPM user has a role which allows addition of an application over the web page, the user can add an application through the web service. Similarly if an EPM user has a role which does not allow deletion of an application over the web page, the user cannot delete the application through the web service as well.