For the service user call to the REST endpoint GET application/currentApplication should be allowed. IMHO it dosen't make sense to allow that endpoint for the bootstrap user but not for the service user!
Documentation for the endpoint: https://cumulocity.com/api/10.11.0/#operation/getCurrentApplicationResource
Hi Florian, thank you for the feedback. Indeed the endpoint was designed to be used in the bootstrat process only. Could you elaborate for which use-case it would be important to also allow the service user to access the current application?
Thanks! Nikolaus