Permission groups

When using OpenID Connect for authentication, the Pismo platform uses API permission groups to control access to each of the platform APIs. You can use Control Center to view API permission groups, which can be useful for answering questions like:

  • Which API permission groups are available for my organization?
  • Which API permission group do I use to access a specific endpoint?
  • Which endpoints does a specific API permission group give access to?
  • Does a specific endpoint require an account ID or an external ID when generating the access token? For more information, refer to Get OpenID access token.

📘

This guide applies only if your organization is configured to use OpenID Connect for authentication.

To view API permission groups:

  1. From the main menu, select Users & permissions > Permission groups.
  2. On the API permission groups screen, use the grouping, sorting, and filtering controls to refine your results.

The results displayed apply only to the organization that you're currently logged in to. If the organization doesn’t use OpenID Connect, the result screen displays the message Org has no permission groups configured.