MIM Privileged Access Management API error

Hi,

The MIM Privileged Access Management API is not working. I'm using MIM 2016 with SP1 on Windows server 2012 R2 in Azure. Why o why?

############

Detailed Error Information:
Module    WindowsAuthenticationModule
Notification    AuthenticateRequest
Handler    ExtensionlessUrlHandler-ISAPI-4.0_64bit
Error Code    0x80070021
Config Error    This configuration section cannot be used at this path. This happens when the section is locked at a parent level. Locking is either by default (overrideModeDefault="Deny"), or set explicitly by a location tag with overrideMode="Deny" or the legacy allowOverride="false". 
Config File    \\?\C:\Program Files\Microsoft Forefront Identity Manager\2010\Privileged Access Management REST API\web.config
Requested URL    http://mimservice2.pam.lan:8086/api/pamresources/
Physical Path    C:\Program Files\Microsoft Forefront Identity Manager\2010\Privileged Access Management REST API\api\pamresources\
Logon Method    Not yet determined
Logon User    Not yet determined
 Config Source:
   31:       <authentication>
   32:         <windowsAuthentication enabled="true" useKernelMode="false"/>
   33:       </authentication>

##########

GH