APIs and typical level of access?

[Fallout1984]

I'm new to APIs, however we expect to start using them more as time goes on. Anyway, we've recently set up an account for AppDynamics in TACACS (and using the big ip's Remote Role Groups) to pull data from one of our F5s. My question is, typically, what level of user auth should be allowed for such an account? I assume, "well, that depends," however I'm wondering if anyone here has a suggestion based on experience. An alternative would be to ratchet it down just before they could no longer pull the data they needed.

Thanks!

[Leslie_Hubertus]

@Fallout1984  - I've asked one of the team to hop in to help here, but they may not see my request until after the weekend. We'll make sure you get some best-practices advice. 

[Fallout1984]

Thanks, Leslie!

[Leslie_Hubertus]

Hey @Fallout1984  - I'm really sorry on the delay. I've escalated this, and will feature it in this week's highlights article for more visibility to get you some answers.

[JRahm · Accepted solution]

for API calls, you'll need admin level access by default. You can set RBAC on a user, though. Here are two articles that should help:

• https://community.f5.com/t5/technical-articles/using-rbac-with-icontrolrest-on-big-ip/ta-p/283641
• https://community.f5.com/t5/technical-articles/icontrol-rest-fine-grained-role-based-access-control/...

[Fallout1984]

Thanks, I appreciate the help! 😁