Support Scoped API Tokens for the User Profile Management endpoint (/users/{account_id}/manage/profile)

XMLWordPrintable

    • 2

      Description:
      Currently, the Atlassian Identity API endpoint GET /users/{account_id}/manage/profile does not support Scoped API Tokens. This creates a technical blocker for organizations attempting to implement a "Least Privilege" security model for their integrations.

      When an integration only requires read-only access to user profile data, administrators are currently forced to provide an unscoped "Admin" API key because the specific profile management endpoint does not recognize scoped credentials. This results in integrations having broader access than is necessary for their function.

      Proposed Change:
      Enable support for Scoped API Tokens (specifically those with read:user:admin or equivalent scopes) to authenticate and retrieve data from the /users/{account_id}/manage/profile endpoint.

      Use Case:
      This change would allow administrative and security integrations to collect necessary user configuration and profile data using restricted, scoped credentials, thereby reducing the security risk associated with using unscoped administrative keys for automated tasks.

              Assignee:
              Unassigned
              Reporter:
              Bert Carrillo
              Votes:
              2 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: