Ownership of API Clients

Hello,

We have a user that has left the company and they have created numerous Client APIs that are being used in integrations throughout our company. How can I transfer ownership of those clients so we do not need to reissue new clients and update all integrations using them.

Thank you.

Chris

Best Answer

  • GrantSmith
    GrantSmith Coach
    Answer ✓

    Changing ownership of the API Clients isn't possible as this isn't a security best practice. Due to your former user having access to these codes they would technically still have access to them and could potentially still access your platform. I'd highly recommend cycling out these credentials and creating new ones. Yes it's more work and more difficult but good security isn't always easy.

    **Was this post helpful? Click Agree or Like below**
    **Did this solve your problem? Accept it as a solution!**

Answers

  • @Chris_Wolman Assuming the previous user was using dataset connectors, you should be able to add additional owners to the dataset account: https://domo-support.domo.com/s/article/360042926054?language=en_US#share_connector_account

  • @MichelleH these are API Clients and not dataset accounts. I already transferred ownership of the dataset accounts. The API Clients are created through developer.domo.com and you can delete them from the Admin screen but you cannot assign new owners. I checked the CLI Tool and it does not appear that you can use the swap-owner command on API Clients.

    Chris

  • brycec
    brycec Contributor

    I played around with the API and tried to find a way to change the owner. As far as I can tell, it is not possible. The best thing you can do is probably just create a new one and replace everywhere the old one is used, as sucky as that is.

    Was this comment helpful? Click Agree or Like below.
    Did this comment solve your problem? Accept it as the solution!

  • GrantSmith
    GrantSmith Coach
    Answer ✓

    Changing ownership of the API Clients isn't possible as this isn't a security best practice. Due to your former user having access to these codes they would technically still have access to them and could potentially still access your platform. I'd highly recommend cycling out these credentials and creating new ones. Yes it's more work and more difficult but good security isn't always easy.

    **Was this post helpful? Click Agree or Like below**
    **Did this solve your problem? Accept it as a solution!**