The backend API implements role-based access control (RBAC). Each user has a role and that role determines what they can and cannot do.
In practice, the different user roles map to a permission level between
The available roles and their privilege levels are:
We offer more fine-grained control over the permission level when authenticating with API keys. When you create an API key, you can choose any permissioning level that is equal or lower than your own role’s permission level.
This allows you to — for example — generate an API key that only have read access to your data.
The table below lists the privilege of all levels as well as their
|read people and patterns||✅||✅||✅||✅|
|read all account data||✅||✅||✅||✅|
|write people or patterns||✅||✅||✅||✅|
|write all account data||✅||✅||✅||✅|
|read people or patterns of other users||❌||✅||✅||✅|
|read all account data of other users||❌||❌||✅||✅|
|write account data of other users through specific support methods||❌||❌||✅||✅|
|impersonate other users, full write access||❌||❌||❌||✅|