F
Finn Goodwin
It would be very helpful to have the ability to create API keys which are limited to a subset of the access of the user creating them. For instance:
  • Read-only access
  • Access to make only specific changes (ie. update policies only, but the more granular the better)
  • Access to only specific orgs
This is especially critical for MSP users and companies using SSO authentication. For instance, as a MSP users with "Admin" access I would not want to create an API key with that same level of access if at all possible, but I have no way to create an API key that has anything less. Additionally, because SSO authentication is enabled I have no ability to create a new more limited user under whom a new key could be added.
Thanks!