PORTAL_SHOW_SHARED_CONTACTS. Each row sets one value for one combination of key parts: reseller, domain, user, user-scope, admin-ui-account-type, and core-server. A key part of * matches everything, so the row with every key part * is the system value.reseller, domain, and user. For each one you send, rows with that value or with * match, and the most specific row is returned. Each key part you leave out matches only *, so with none you get the system value. include_wildcards=false matches only the exact values you sent.user-scope other than your own returns 403./nmsconfig masks them: a name containing a secret keyword (password, key, token, secret, and others), less the names in the NsConfigurationMaskExempt setting, has its value masked unless the value is shorter than NsConfigurationMaskMinLength (default 4) or a plain switch (yes, no, true, false, on, off, enabled, disabled). A Super User can send include-secrets=yes to get them in clear; any other scope that sends it gets 403.default then applies (GET /config-definitions/{config-name}).Authorization: Bearer ********************curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/configurations/PORTAL_SHOW_SHARED_CONTACTS?domain=example.com&reseller=example-reseller&user=1001&core-server=core1.example.com&user-scope=Office%20Manager&admin-ui-account-type=Domain&include_wildcards=true&include-secrets=no' \
--header 'Authorization: Bearer <token>'[
{
"config-name": "PORTAL_SHOW_SHARED_CONTACTS",
"config-value": "no",
"description": "Hide shared contacts in this domain",
"reseller": "*",
"domain": "example.com",
"user": "*",
"user-scope": "*",
"admin-ui-account-type": "*",
"core-server": "*"
}
]