Techtalks: Traveltech

Hi, Francisco!
Thank you for your question and feedback

First of all, let me draw your attention to the fact, that from API point of view your request is not correct. {flight-orderId} you can see in Amadeus API reference for bookings management is not a PNR. This is an order ID, you can find this order ID in /booking/flight-orders response when you create a booking using POST verb. This is Amadeus internal identificator that is required to get PNR information using self-service or enterprise REST API of Amadeus.

However your assumption about access issue is also correct. You can not retrieve any PNR from GDS without appropriate permissions and not always PNR that passengers see on their tickets are the same PNRs that can be retrieved from Amadeus. If several systems are involved in the booking process, (say, an OTA booked a flight via Sabre, but an airline operating the flight hosts its CRS in the Amadeus system), each of them generates its own booking reference to the file with flight details. 
So, to work with a certain flight order in Amadeus, you have to enter the record locator (6-character code) returned particularly by Amadeus  — not the PNR number you see on the e-ticket or in the booking confirmation e-mail.

Please contact us in case you have more questions, we will be happy to help you with GDS integration for your business