Whose rights does a public API token inherit and to what level is that enforced?

Products

• CA Application Performance Management SaaS

Issue/Introduction

when a Public API token is created in DX APM whose rights (id) does that inherit and when used in an API request to what level are that users rights enforced in the actions being executed. e.g.. if creating a universe or modifying other objects. 

 

 

Environment

Release : SAAS

Component : Integration with APM

Resolution

Public API tokens inherit the user id of the user that creates them and any access made using that Token will honour the rights and privileges of that user.

Additional Information

To check the user id of an existing token you can use the online tool at https://jwt.io/