Skip to main content
Anonymous
May 2, 2017
Solved

Unique API user for each custom service?

Setting up integrations with Zapier and Wistia. In the documentation, one is required to create an API user. However, can the same API user be used for all custom services?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
SanfordWhiteman
SanfordWhitemanAccepted solution
Level 10
May 2, 2017

Technically, there is no prohibition against sharing one user.  However, it's an extremely bad idea for practical reasons:

  • If you need to account for API calls made by a given app (which you should, given the possibility of overrunning your daily limit) you need to have separate accounts.
  • When you need to revoke access for a given client (which you must, whenever you terminate a contract) you must ensure this doesn't break your other integrations.
  • When you want to tune permissions for the tightest possible security, you need different accounts.
View in thread

1 reply

SanfordWhiteman
SanfordWhitemanAccepted solution
Level 10
May 2, 2017

Technically, there is no prohibition against sharing one user.  However, it's an extremely bad idea for practical reasons:

  • If you need to account for API calls made by a given app (which you should, given the possibility of overrunning your daily limit) you need to have separate accounts.
  • When you need to revoke access for a given client (which you must, whenever you terminate a contract) you must ensure this doesn't break your other integrations.
  • When you want to tune permissions for the tightest possible security, you need different accounts.
Translate
Terms & ConditionsAccessibility statement

Loading footer...