Skip to main content
Solved

API Admin User Role

  • January 6, 2026
  • 3 replies
  • 41 views

Forum|alt.badge.img+1

Hi Community,

 

Is there a way to have an API Role for a designated API User that is basically an API Admin and not a UI Admin?

 

-RJ

Best answer by jinin

Hi ​@rkenna ,

Try the below steps:

  1. Create an API User Type
  • Set Allowed Login Type = API
  • Disable Two-Factor Authentication
  • This ensures the user cannot log in to the UI
  1. Create a Dedicated API User
  • Assign the API User Type
  • Link to an employee (required)
  1. Create a Custom API Role (API Admin)
  • Enable Web Service access
  • Grant access only to required screens/modules
  • Do not use the Administrators role
  1. Assign the Role to the API User
  • Assign only the custom API role
     

     

3 replies

jinin
Pro I
Forum|alt.badge.img+12
  • Pro I
  • Answer
  • January 6, 2026

Hi ​@rkenna ,

Try the below steps:

  1. Create an API User Type
  • Set Allowed Login Type = API
  • Disable Two-Factor Authentication
  • This ensures the user cannot log in to the UI
  1. Create a Dedicated API User
  • Assign the API User Type
  • Link to an employee (required)
  1. Create a Custom API Role (API Admin)
  • Enable Web Service access
  • Grant access only to required screens/modules
  • Do not use the Administrators role
  1. Assign the Role to the API User
  • Assign only the custom API role
     

     


Forum|alt.badge.img+1
  • Author
  • Captain I
  • January 8, 2026

Hi ​@jinin,

 

What would happen if I did allow the login type to API, and gave the API user the Admin role?

Thanks,

RJ


jinin
Pro I
Forum|alt.badge.img+12
  • Pro I
  • January 9, 2026

Hi ​@rkenna 

If the API user gets full control of the system (Admin Role).

  • Can read, create, update, and delete any data
  • Can bypass UI validations
  • Can change system configuration
  • Can cause data corruption if the API has a bug
  • Hard to track changes (everything looks like Admin did it)