Skip to main content
Solved

API Admin User Role

  • Jan 6, 2026 2:32 PM UTC
  • 3 replies
  • 165 views
  • Translate All

rkenna
Captain II
Forum|alt.badge.img+5

Hi Community,

 

Is there a way to have an API Role for a designated API User that is basically an API Admin and not a UI Admin?

 

-RJ

Best answer by jinin

Hi ​@rkenna ,

Try the below steps:

  1. Create an API User Type
  • Set Allowed Login Type = API
  • Disable Two-Factor Authentication
  • This ensures the user cannot log in to the UI
  1. Create a Dedicated API User
  • Assign the API User Type
  • Link to an employee (required)
  1. Create a Custom API Role (API Admin)
  • Enable Web Service access
  • Grant access only to required screens/modules
  • Do not use the Administrators role
  1. Assign the Role to the API User
  • Assign only the custom API role
     

     

View original

3 replies

jinin
Pro I
Forum|alt.badge.img+12
  • Pro I
  • Answer
  • Jan 6, 2026 4:20 PM UTC

Hi ​@rkenna ,

Try the below steps:

  1. Create an API User Type
  • Set Allowed Login Type = API
  • Disable Two-Factor Authentication
  • This ensures the user cannot log in to the UI
  1. Create a Dedicated API User
  • Assign the API User Type
  • Link to an employee (required)
  1. Create a Custom API Role (API Admin)
  • Enable Web Service access
  • Grant access only to required screens/modules
  • Do not use the Administrators role
  1. Assign the Role to the API User
  • Assign only the custom API role
     

     

Translate

rkenna
Captain II
Forum|alt.badge.img+5
  • Author
  • Captain II
  • Jan 8, 2026 8:35 PM UTC

Hi ​@jinin,

 

What would happen if I did allow the login type to API, and gave the API user the Admin role?

Thanks,

RJ

Translate

jinin
Pro I
Forum|alt.badge.img+12
  • Pro I
  • Jan 9, 2026 6:42 AM UTC

Hi ​@rkenna 

If the API user gets full control of the system (Admin Role).

  • Can read, create, update, and delete any data
  • Can bypass UI validations
  • Can change system configuration
  • Can cause data corruption if the API has a bug
  • Hard to track changes (everything looks like Admin did it)
Translate