simPRO API Forum

Hi,

We’re building an integration using the Simpro API and had a question regarding user permissions and OAuth.

Within an organisation, users can belong to different security groups with different permissions. If multiple users from the same company authorise our application, we want to ensure that any API actions respect the permissions of the individual user.

A couple of questions:

1. Is there an endpoint that allows us to determine the **security group(s) or permissions** associated with the authenticated user?
2. When using OAuth, is the access token tied to the **specific Simpro user who authorised the app**, or does it act as a company-wide token?

Thanks in advance for any clarification.

Hi there,

Simpro credentials are linked to an 'application' versus a specific user. There is no current way to restrict access to certain endpoints for certain applications (meaning you can use any of them as long as you are authenticated) and I can recognise how this would be a useful feature.

If you haven't already I'd advise you to sign up to our partners program, which provides a direct line of communication for feature requests and Simpro updates, which you can do so here: [email protected]
https://www.simprogroup.com/partners#become-a-partner

You can also submit a feature request here: https://helpguide.simprogroup.com/Conte ... portal.htm

Thanks,