Minimum roles/permissions required for DAP automation.

[JackCarico]

We want to setup automation for replication of data from DAP to our internal SQL environment. A secret issued to an account admin was used for testing, but we want to scope to a user with only read permissions to data in Canvas and DAP and no other permission within canvas. I have reviewed the information here: https://community.canvaslms.com/t5/Canvas-Resource-Documents/Canvas-Account-Role-Permissions/ta-p/38... but it doesn't seem to explicitly reference the DAP. 

[ColinMurtaugh · Accepted solution]

DAP and the Canvas API use different authentication systems. All DAP API keys are read-only, as all of DAP is read-only. A DAP key provides no access to the Canvas API.

All DAP keys provide the same access to DAP -- they're not based on the Canvas permissions of the user who generated them.

--Colin