API Read-only view of everything

[glparker]

Hello,

I'm interested in creating an admin role with privileges to read any and all data on the system, but not be able to update anything.   The use case is for a report building user that will need to use the API to query data from across the system with admin like privileges (GET's), but they should not have access to update any data (PUT, DELETE, POST, etc)   

Is it enough to give an account admin all the available VIEW permissions and none of the rest, or will that cause the person to miss things?    Is there a set of admin permissions that would let a person have all read but no write permissions?

[robotcars]

Have you looked at Canvas Data? Which comes with it's own technical logistics.

Writing API calls and programs for reporting is an expensive* task vs. SQL Queries.

Not everything in the API is available in Canvas Data, but 75-90% gets you pretty far, and then you'd have a place to store your API data...

*1-100 records at a time, nested IF's and loops, and then where do you store the data?