November 2026

This release adds role-based access for API clients, so you decide which assets each client can work with.

Choose the access type for each API client

Limit each API client to the assets it needs with the new role-based access type.

Previously, all API clients received full access. Now, when you create an API client, you can choose between two access types:

Full access: The client can call all REST API endpoints.
Role-based access: The client starts with no access, and you grant it access the same way you do for users. Add the client to a group and share assets with the group, or make the group their steward. The governance role you assign the client in the group determines what it can do with those assets.

You can adjust or revoke a role-based client’s access at any time, for example when a tool is no longer in use.

Role-based API clients are turned off by default. To enable them, contact your Customer Success Manager.

Was this page useful?