Scope of an API token
When generating an API token, you need to select scope for it. APIs that can be used vary depending on the scope you have selected.
This page describes the APIs that can be used in each scope.
APIs that can be used in the "Read" scope
By selecting the "Read" scope, getting data such as user and organization information is allowed.
- Get Users
- Get User's Departments
- Get User's Groups
- Get User Services
- Get Departments
- Get Department's Users
- Get Groups
- Get Group's Users
APIs that can be used in the "Read and Write" scope
By selecting the "Read and Write" scope, getting and changing data such as user and organization information are allowed.
However, changing the information of users who belong to the "Administrators" group or the group information to which users belong is not allowed.
- APIs that can be used in the "Read" scope
- Add Users
- Update User Codes
- Update User's Departments
- Update User Services
- Add Departments
- Update Departments
- Delete Departments
- Update Department Codes
- Add Groups
- Delete Groups
- Update Group Codes
The following APIs can be used only when the information of users who do not belong to the "Administrators" group is included.
APIs that can be used in the "Dangerous Zone" scope
By selecting the "Dangerous Zone" scope, all User API usage is allowed. Changing the information of users who belong to the "Administrators" group and the group information to which users belong is allowed.