DEVELOPER CENTER
Hi,
We’re building an integration using the Simpro API and had a question regarding user permissions and OAuth.
Within an organisation, users can belong to different security groups with different permissions. If multiple users from the same company authorise our application, we want to ensure that any API actions respect the permissions of the individual user.
A couple of questions:
1. Is there an endpoint that allows us to determine the **security group(s) or permissions** associated with the authenticated user?
2. When using OAuth, is the access token tied to the **specific Simpro user who authorised the app**, or does it act as a company-wide token?
Thanks in advance for any clarification.
permission access
Forum rules
- Check the documentation first. Before posting questions, please check the documentation to ensure it doesn't already cover what you need.
- No spam. All automated messages, advertisements, and links to competitor websites will be deleted immediately.
- Post in relevant sub-forums only. Messages posted in the wrong topic area will be removed and placed in the correct sub-forum by moderators.
- Respect other users. No flaming or abusing fellow forum members. Users who continue to post inflammatory, abusive comments will be deleted from the forum after two warnings are issued by moderators.
- Harassment. No threats or harassment of other users will be tolerated. Any instance of threatening or harassing behavior is grounds for deletion from the forums.
- Adult content. No profanity or pornography is allowed. Posts containing adult material will be deleted.
- Bandwidth. All images and signatures must be 500 x 500 pixels or smaller. Posts containing over-sized images and signatures will be removed.
- Illegal content. No re-posting of copyrighted materials or other illegal content is allowed. Any posts containing illegal content or copyrighted materials will be deleted.
-
SimproAPITeam
- Posts: 831
- Joined: Wed May 01, 2024 2:31 am
Re: permission access
Hi there,
Simpro credentials are linked to an 'application' versus a specific user. There is no current way to restrict access to certain endpoints for certain applications (meaning you can use any of them as long as you are authenticated) and I can recognise how this would be a useful feature.
If you haven't already I'd advise you to sign up to our partners program, which provides a direct line of communication for feature requests and Simpro updates, which you can do so here: [email protected]
https://www.simprogroup.com/partners#become-a-partner
You can also submit a feature request here: https://helpguide.simprogroup.com/Conte ... portal.htm
Thanks,
Simpro credentials are linked to an 'application' versus a specific user. There is no current way to restrict access to certain endpoints for certain applications (meaning you can use any of them as long as you are authenticated) and I can recognise how this would be a useful feature.
If you haven't already I'd advise you to sign up to our partners program, which provides a direct line of communication for feature requests and Simpro updates, which you can do so here: [email protected]
https://www.simprogroup.com/partners#become-a-partner
You can also submit a feature request here: https://helpguide.simprogroup.com/Conte ... portal.htm
Thanks,
Simpro API Team | Simpro Software Group