Our app adds customer domains as tenants of a site and requests their certificates via the API. For that, the token currently needs broader permissions than these actions require.
We'd love dedicated token permissions for tenants:
- list, create and delete tenants
- request tenant certificates
That way, a token used only for custom domains couldn't change anything else, like server settings, deployments or environment files.
Separate API token permissions for tenant management
-
Marc Heiduk moved item to project Sites
11 hours ago -
Marc Heiduk created the item
11 hours ago