A client must connect to the HPOM Incident Web Service using HTTP basic authentication. Use your normal client development toolkit to specify a username and password in the client's HTTP requests.
The username and password that you specify must be those of a valid HPOM user. The user must have appropriate rights to perform the operations that the client attempts.
If the user that you specify is an operator, the client's permissions depend on the platform:
The client has the same permissions as the operator would have in the HPOM console. For example, the EnumerateOp returns only incidents that the operator would see as messages in the console.
The client may have more permissions than the operator would have in the HPOM console. In particular, any restrictions from user roles do not apply. The service can enumerate all messages, and change messages that are not already owned by another user.