Hi all, I was wondering if it was possible to crea...
# gooddata-cloud
f
Hi all, I was wondering if it was possible to create an GoodData API access token with limited permissions. For our use case, we want to only allow access to export CSV/XLSX data or PDFs from specific dashboards/visualizations.
j
Hi Faizah, This is definitely possible by amending organisation permissions: https://www.gooddata.com/docs/cloud/manage-organization/manage-permissions/set-permissions-for-organization/ And then creating personal access token: https://www.gooddata.com/docs/cloud/manage-organization/user-token/
To give you more context, By default, only admin groups with
MANAGE
organisation permission are able to create API tokens. However, there is also possibility to create a user groups for your clients which would use
SELF_CREATE_TOKEN
organisation permission. Basically, you would need to create a new user group with
SELF_CREATE_TOKEN
organisation permission, add there the users and then they would be to create their own API token and do the exports via API. Then, you can also amend the Workspace permissions for that particular user group to limit their capabilities within the workspace itself if needed. EXAMPLE: I have tested this, I’ve created
Testing_Group
with
SELF_CREATE_TOKEN
organisation permission, added there my testing user and set “View & Export” Workspace permission:
Now, my user which I’ve added to this group is able to create his personal API token and also do the exports via API. (note that the group must have either “View & Export”, “Analyze & Export” or “Manage” workspace permission in order to be able to work with exports.
Important note: In case you will decide to go this way, please be very careful while amending the organisation permissions endpoint. While updating it, in the request body, you must always include the already existing (admin) groups so you won’t accidentally delete them while overwriting the whole endpoint (you only want to add there another group).
f
Thanks, we'll try this out! cc: @Max Donsky