Token scoping as instructor rather than admin

[BKINNEY]

As a Canvas administrator, there are times when I'd like to issue an authorization token that is scoped as though I were an instructor. This would be useful for testing purposes, but also for cases where I am actually teaching a course, and I want to give a 3rd party access only to the data they would get if I were an instructor for that course. Is there a way to do that?

In general, I find that the security issues around tokens, particularly admin tokens, are a bit scary. At the same time, I'm totally thrilled by the apps I can build by taking advantage of the API. I'd love to be able to share these more broadly, but even asking people for tokens, especially admin tokens, makes me anxious. Are there plans to implement authorization scoping?

[awilliams]

We get around this by having a separate "Account Admin" account that isn't tied to a user account. So during the day I am regularly working in Canvas as "eLearning Department" but I also have an "Adam Williams" account that isn't an account admin. This not only allows me to enroll in courses as a teacher and issue tokens as just a teacher without giving out an account admin token (which I almost never do), but also was useful in the transition when my predecessor left and I assumed the role of account admin. I think the idea is still a good one though!

[stuart_ryan]

Hi  @BKINNEY ,

I am going through having a look at some of the early days in the Canvas Developers group, and checking in to see if older enquiries have been answered. I also noticed there hasn’t been any discussion on this question in quite some time.

I am wondering, were you able to resolve this with the assistance provided? I am hoping I can assume that it is well and truly resolved by now, but if not, please let us know and we can certainly have another look. Alternatively, if have some insights you may be able to share for others that would be awesome too!

I will mark this as assumed answered for the time being, however, by all means please let us know if you still have an outstanding question and we will take a peek!

Cheers,
Stuart