Hello @JGPSHNTAP,
ZAPI is accessible over both HTTP (when enabled) and HTTPS...there's no reason to enable HTTP if you don't want/need to. To access ZAPI, regardless of protocol, the user will need to have the "ontapi" application enabled for them:
security login create -vserver <svm_name> -user-or-group-name <username> -application ontapi -authentication-method password
Andrew
If this post resolved your issue, please help others by selecting ACCEPT AS SOLUTION or adding a KUDO.