API Key Management
API keys are the credentials used to authenticate requests to the DataCentral REST API. They are managed by a Tenant Administrator and scoped to a specific Tenant.
1. Creating an API Key
- Navigate to Administration > Users.
- Click Manage API Keys. (If not visible, check features enabled for tenant and/or permissions for the logged in user)
- Click Create to generate a new API key.
2. Key Management Options
Secrets
Each API key can have up to two active secrets at once. This allows for secret rotation without downtime — generate a new secret, update your application to use it, then invalidate the old one.
Expiration
Secrets can be assigned an expiration date, after which they are automatically invalidated.
Disabling
An API key can be disabled at any time to immediately revoke access without deleting it.
Roles
Roles can be assigned directly to an API key. The key is then treated as a regular user with those roles, meaning all RBAC rules apply to every request made with it.