# Separate API token permissions for tenant management

**Project:** Sites | **Votes:** 1
**URL:** https://roadmap.ploi.io/projects/2-site-level-requests/items/1631-separate-api-token-permissions-for-tenant-management

---

Our app adds customer domains as tenants of a site and requests their certificates via the API. For that, the token currently needs broader permissions than these actions require.

We'd love dedicated token permissions for tenants:

- list, create and delete tenants
- request tenant certificates

That way, a token used only for custom domains couldn't change anything else, like server settings, deployments or environment files.