UserFederation AD rest api

Hello ,
I have tried Keycloak 16.1.1 with postgres db where all my users, roles groups … are in the db, I can retreive them perfectly using keycloak api .
right now I’ trying user-federation with Active directory instead, the authentication works fine but to get users from keycloak api with same url generating errors
’ {
“headers”: {
“normalizedNames”: {},
“lazyUpdate”: null
},
“status”: 403,
“statusText”: “Forbidden”,
“url”: “https://myxperience-recette.acedigitale.com/keycloak/auth/admin/realms/xperienceV2/users”,
“ok”: false,
“name”: “HttpErrorResponse”,
“message”: “Http failure response for https://myxperience-recette.acedigitale.com/keycloak/auth/admin/realms/xperienceV2/users: 403 Forbidden”,
“error”: {
“error”: “unknown_error”
}
} ’
did I miss something ?
thank you in advance