For the service user call to the REST endpoint GET application/currentApplication should be allowed. IMHO it dosen't make sense to allow that endpoint for the bootstrap user but not for the service user! Documentation for the endpoint: https://cum...