Solution
The error is reported as the NI Web Server the SystemLink Server uses doesn't whitelist the
X-NI-API-Key header as approved for Cross-Origin Resource Sharing (CORS).
The recommended way for a browser application to authenticate with SystemLink is to have the user log into the SystemLink web UI and then use the user's login session. This is what happens when using the
Open Configuration (HTTP Auto) function instead of wiring explicit credentials.
Deploying the G Web webVI to the same NI Web Server as the SystemLink Server would both avoid CORS issues and enable the use of the auto configuration so that you don't need any credentials hard-coded in the webVI.