In any case, the said credentials are valid for the company ID defined using 

apiserver.default_company

It really works for apiserver, but webserver does not have the default_company configuration.

Are you sending these requests manually?
COK. In any case, you should be looking at the

I send them with curl.

Is this the cloud-ready version? or the legacy chart?

Thanks a lot! I’ ll replace credentials with new user in assigned to a new company ID to call users.get_all again.

Hi FloppyDeer99 ,
the users.get_all should be sent to the apiserver, not to the webserver. In any case, the header will not affect this request as the server will be using your user's identity (encoded in the authorization header) to resolve the company