I am using the below async code to run an activity. It is working fine from the dev portal, but when i am invoking it from user portal it is showing 403 forbidden error in the console. Even if we disable authentication chckbox in the activity, getting the same issue.

Is there any grant we need to apply for the user access or different syntax should be used?

I am using Pega 8.6.

var request = pega.u.d.asyncRequest('GET',oSafeUrl);