APIs and typical level of access?

Question

I'm new to APIs, however we expect to start using them more as time goes on. Anyway, we've recently set up an account for AppDynamics in TACACS (and using the big ip's Remote Role Groups) to pull data from one of our F5s. My question is, typically, what level of user auth should be allowed for such an account? I assume, "well, that depends," however I'm wondering if anyone here has a suggestion based on experience. An alternative would be to ratchet it down just before they could no longer pull the data they needed.

Thanks!

jrahm · Accepted Answer

for API calls, you'll need admin level access by default. You can set RBAC on a user, though. Here are two articles that should help:

https://community.f5.com/t5/technical-articles/using-rbac-with-icontrolrest-on-big-ip/ta-p/283641
https://community.f5.com/t5/technical-articles/icontrol-rest-fine-grained-role-based-access-control/ta-p/287641

fallout1984 · Answer

Thanks, I appreciate the help!&nbsp;😁

leslie_hubertus · Answer

Fallout1984&nbsp; - I've asked one of the team to hop in to help here, but they may not see my request until after the weekend. We'll make sure you get some best-practices advice.&nbsp;

fallout1984 · Answer

Thanks, Leslie!

leslie_hubertus · Answer

Hey&nbsp;Fallout1984&nbsp; - I'm really sorry on the delay. I've escalated this, and will feature it in this week's highlights article for more visibility to get you some answers.

Forum Discussion

APIs and typical level of access?

5 Replies

Recent Discussions

Social Media Marketing

Content Marketing

Failed to add new DNS machine to the existing DNS sync-group

Email Notification Sent For The Configuration Change

F5 Malicious Source IP Address Alert

Related Content

OWASP Tactical Access Defense Series: Broken Object Level Authorization and BIG-IP APM

TCL Procs and Levels

BIG-IP Meets DoD’s Needs for Next Level Logging Capabilities

High-level Pathways to Security Visibility

Create a IFile {system level} via API - Powershell