Read only access to API

[FlyingFrames]

Is there such a thing as providing read only access to APIs?

I guess if an API key can be set to read only, then it should be able to perform only GET operations. Is this possible with Meraki?

We are trying to give an app access to perform only GET operations!

[RaphaelL · Accepted solution]

Give the user account read-only privileges.  Will it restrict the user from being able to use POST ? Not sure

[FlyingFrames]

Thanks. Just tried, this trick worked. Created a read only user and the API key created from it is only doing read only operations.

[sungod]

Do bear in mind that 'read-only' access is not totally read-only - a read-only account still allows port-cycling and cable-test operations to be performed on switch ports.

For instance, cycling a port will result in downstream devices will losing connectivity and PoE.

We had a customer find this out the hard way.

I.e. you still need to be careful about granting read-only permission and caution users about these operations.