The Instructure Community will enter a read-only state on November 22, 2025 as we prepare to migrate to our new Community platform in early December. Read our blog post for more info about this change.
What permissions are needed to make api calls? Is everything allowed by Account Admin needed or can we tailor a role?
Solved! Go to Solution.
The API token has the permissions of the user who owns the token. If that user has permissions to do something and there is an API call for it, then you're set.
All users, including students, can make API calls -- that's how the mobile apps work.
API tokens scoped to root admin accounts should be able to make any API call. They may need to masquerade as a different user, but they have the ability to masquerade.
The API token has the permissions of the user who owns the token. If that user has permissions to do something and there is an API call for it, then you're set.
All users, including students, can make API calls -- that's how the mobile apps work.
API tokens scoped to root admin accounts should be able to make any API call. They may need to masquerade as a different user, but they have the ability to masquerade.
Thanks James, succinct and to the point!
Michael
Community helpTo interact with Panda Bot, our automated chatbot, you need to sign up or log in:
Sign inTo interact with Panda Bot, our automated chatbot, you need to sign up or log in:
Sign in
This discussion post is outdated and has been archived. Please use the Community question forums and official documentation for the most current and accurate information.