Authenticated Api

Hi all,
How can I authorized the Api calling using crf_token?

I tried to put the header as the following:

csrf_token is which generated after user login

here my API call, it works when I power off "postman inspector"m but when I turn it off, these message appear: Insufficient Permission for Attendance


Any suggestion plz?

You have to be logged in as User who has Permission to read Attendance

I already do that