Unique API user for each custom service? | Community
Skip to main content
A
Anonymous
May 2, 2017
Solved

Unique API user for each custom service?

  • May 2, 2017
  • 1 reply
  • 1235 views

Setting up integrations with Zapier and Wistia. In the documentation, one is required to create an API user. However, can the same API user be used for all custom services?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by SanfordWhiteman

Technically, there is no prohibition against sharing one user.  However, it's an extremely bad idea for practical reasons:

  • If you need to account for API calls made by a given app (which you should, given the possibility of overrunning your daily limit) you need to have separate accounts.
  • When you need to revoke access for a given client (which you must, whenever you terminate a contract) you must ensure this doesn't break your other integrations.
  • When you want to tune permissions for the tightest possible security, you need different accounts.

1 reply

SanfordWhiteman
SanfordWhitemanAccepted solution
New Participant
May 2, 2017

Technically, there is no prohibition against sharing one user.  However, it's an extremely bad idea for practical reasons:

  • If you need to account for API calls made by a given app (which you should, given the possibility of overrunning your daily limit) you need to have separate accounts.
  • When you need to revoke access for a given client (which you must, whenever you terminate a contract) you must ensure this doesn't break your other integrations.
  • When you want to tune permissions for the tightest possible security, you need different accounts.
Terms & ConditionsAccessibility statement

Loading footer...