Home > APIs > API Security Roles & User Permissions

...

Currently, access to all API endpoints and REST methods is governed by one permission called Use Veslink API. However, Administrators want some API users to have Read Only access and others to have both Read and Write access. They also want to restrict access to the IMOS message endpoints to all but a few users, given the administrative access those endpoints provide.

In response to client feedback, Veson Nautical has enhanced API security roles to enable finer-grained permissions to the API endpoints. To minimize disruption to API access, all users with the Use Veslink API permission will be granted all three new permissions:

• API Read: Allows access to all Read calls, which use the GET method

• API Write: Allows access to all Write calls, which typically use the POST and PATCH methods, as well as all Read calls

• API IMOS Message: Allows access to IMOS message endpoints, as well as all Read and Write calls

After the migration, Administrators may further configure security as needed.

Migrating Users from the Current API Permission to the New Permissions

An Administrator with access to the User Management page within a Company can find the current Use Veslink API permission within the General Permissions section of the Edit User page.

...