Scope of an API token
When generating an API token, you need to select scope for it. APIs that can be used vary depending on the scope you have selected.
This page describes the APIs that can be used in each scope.
APIs that can be used in the "Read" scope
By selecting the "Read" scope, getting data such as user and organization information is allowed.
APIs that can be used in the "Read and Write" scope
By selecting the "Read and Write" scope, getting and changing data such as user and organization information are allowed.
However, changing the information of users who belong to the "Administrators" group or the group information to which users belong is not allowed.
- APIs that can be used in the "Read" scope
- 导入用户API
- 更新登录名
- 更新用户所属组织
- 导入用户所使用的服务的API
- 添加组织
- 更新组织
- 删除组织
- 更新组织代码
- 添加组
- 更新组
- 删除组
The following APIs can be used only when the information of users who do not belong to the "Administrators" group is included.
APIs that can be used in the "Dangerous Zone" scope
By selecting the "Dangerous Zone" scope, all User API usage is allowed. Changing the information of users who belong to the "Administrators" group and the group information to which users belong is allowed.