Restrict API User Administration to only Authorized admin Groups

In Control Hub, API user creation, modification, or deletion generates audit logs that are forwarded to the security team, resulting in a high volume of security events.

To reduce these unnecessary event triggers, like to restrict API user management activities and ensure that only authorized users can perform such actions, thereby preventing unauthorized changes to API users.

To avoid this you are looking to implement role-based access control (RBAC) so that only a designated group of admin can create, update, or delete API users. Regular users should not have permissions to make any changes to API users.

The primary objectives arer:

Restrict API user creation, modification, and deletion to authorized administrator groups only.

Prevent unauthorized changes by standard users. Enforce role-based access control and governance.

Gray out the Add New API Credential button for standard users.

Next step is to determine whether granular permissions for API user management and identify the appropriate configuration to restrict these actions to specific administrator groups.

Needed By

Quarter

Post comment

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.

Please enter your email address

RELATED IDEAS

Restrict API User Administration to only Authorized admin Groups