I was trying to control apache nifi processors to start/stop by calling apache nifi-api. I am using Postman to make the call, for example to start a GenerateFlowFile processor:
https://localhost:8443/processors/{processor id} (PUT Request)
But I got the response status 403(forbidden) as shown in the image below.

I was able to make a get request.
I have also a client self-signed certificate generated using nifi-toolkit by following this https://kylo.readthedocs.io/en/v0.10.0/security/ConfigureNiFiWithSSL.html
from nifi.properties file:
ifi.security.autoreload.enabled=false
nifi.security.autoreload.interval=10 secs
nifi.security.keystore=./conf/kylo/localhost/keystore.jks
nifi.security.keystoreType=jks
nifi.security.keystorePasswd=.............
nifi.security.keyPasswd=.............
nifi.security.truststore=./conf/kylo/localhost/truststore.jks
nifi.security.truststoreType=jks
nifi.security.truststorePasswd=.............
nifi.security.user.authorizer=single-user-authorizer
nifi.security.allow.anonymous.authentication=true
nifi.security.user.login.identity.provider=single-user-provider
nifi.security.user.jws.key.rotation.period=PT1H
nifi.security.ocsp.responder.url=
nifi.security.ocsp.responder.certificate=
NOTE: I did not change anything in the authorizations.xml and the authorizers.xml
@steven-matison thanks by the way for telling me to post this concern. I am new to NiFi also.