The documentation mentions the following:
User Security in OneClick
All requests using the CA Spectrum Web Services API respect CA Spectrum user model-based security.
Important! The CA Spectrum Web Services API is a powerful tool. It does not provide the safeguards that OneClick does, especially related to modeling. It should be used only by CA Spectrum administrators with strong knowledge of the CA Spectrum data model.
Secure Connections
The CA Spectrum Web Services API supports secure connections to the OneClick server. To use secure connections, the OneClick server must be configured for Secure Sockets Layer (SSL).
Note: For information about configuring OneClick for SSL, see the Administrator Guide.
https://docops.ca.com/ca-spectrum/10-1-and-10-1-1/en/programming/web-services-api-reference/how-to-use-the-ca-spectrum-w…
If you are seeing problems and/or behaviour that is different to what is noted in the Spectrum Documentaion, please open a case with CA Support.