API method Analytics/Launch implementation - Need PRODUCT ADMIN access MANDATE ? Why not PROFILE admin alone?

[prathap08]

Hi Team,

I'm the product admin (analytics and launch) for two websites ( can call site A and site B) under one organisation account.

Site A - already implemented everything and data is flowing under the workspace. All good.

Site B - other team going to implement analytics solution. They asked us product admin to implement. We denied and created one profile for site B and provided the access. Under profile admin for that report suite and launch property alone.

They asked API access as well to automate the data layer structure. I have added them under developer under the site B profile and given the access to API creation. They have created API process and I'm able see the API key email Id under the profile admin.

Problem is >>

Still they are saying if they want to limit the manual process to build the analytics solution they all need PRODUCT ADMIN to the email id where comes with some multiple alphanumeric values in the ends with techart.adobe.com email ID.

Our admin (my team) feel like if we give the product admin to the that alpha numeric I'd they are able to access Site A and Site B.

Need Solution - Is they anything like to restrict the access level to site B alone even after providing the PRODUCT ADMIN role?

Aren't they proceed having PROFILE admin along developer access to API for Site B profile?

[Jacob-DDdev · Accepted solution]

Hi @prathap08 ,

It depends on what API they need access to as some v2.0 don't work w/o OAuth and System Admin permissions... However, if all they are doing is exporting/inserting data, they don't need anything more than being a developer on a PP with their report suite. Furthermore, there's pretty much no reason to have product profile admins. The only times those are necessary are for products like Target where customizing permissions either requires being a product admin or profile admin. This question might be better re-stated as an idea, where the Admin Console is updated to better fine-tune developer access, and sensitive API can be performed without Admin permissions and OAuth credentials.

If you provide further details about what API that team actually needs, more details can be given about how to provide the necessary/sufficient permissions.

[prathap08]

Hi Jkm,

Yes, we both are on the same page. They are want to create event driven data layer. All they good now. They are yet be cleared why they want product admin.

[jantzen_b]

Do any of the answers below answer your initial question? If so, can you select one of them as the correct answer? If none of the answers already provided answer your question, can you provide additional information to better help the community solve your question?

[prathap08]

Hi Team, 

They are not much cleared why they want product admin. They are yet to be provided the reason. So far they are good with the access where provided to them.