Santtu Seppänen

Hi,

I am trying to update a ticket comment on behalf of the end-user. I've added the impersonate scope to the OAuth access token and sending the following like request to **.zendesk.com/api/v2/tickets/*ticketId*.json

Headers:

Authorization: Bearer *OAuthAccessToken*, 
"X-On-Behalf-Of": *end-userId*, 
"Content-Type":"application/json", 

Body:

ticket: {
   comment: {
      html_body: this is a test message 
,
      public: true,
   },
}

This request is returning me HTTP 403 Forbidden every time I use an end-user id in the header but the impersonation works if I use an id of an agent or an admin. The document says "In Zendesk Support, an authenticated admin can make API requests on behalf of any end-user. The end user's email doesn't need to be verified". So what I am missing here?

I made a workaround by using an admin user id in the X-On-Behalf-Of header and then adding the end-user id as author_id in the request body. But this may have some implications, so it's not maybe the advice way of doing this.