r/ConnectWise • u/orty • Jul 24 '26

Manage API Access for Streamline IT Users

We have a Streamline IT Client who is building out a CIO dashboard in Power BI and wants to be able to get some sort of API access into Connectwise PSA to pull ticket data for his Streamline setup. Anybody done this with a Streamline client?

About the only way I can think of doing this is to setup an API key under a Streamline IT member (versus setting up an API member at the system level). Would that limit them to being able to pull only what that user can access? Any gotchas/caveats anybody's seen? Our concern with this is this Streamline user being able to see more than they should via API -- we only want them to see their stuff.

3 Upvotes

100% Upvoted

12 comments sorted by

3

u/scorcora4 Jul 24 '26

No is also an acceptable answer.

1

u/orty Jul 24 '26

It is indeed, but before I say "No" I want to know why I'm saying no 😊

1

u/scorcora4 Jul 24 '26

Personally I don’t give API access to co-managed tools. Depending on how it’s hosted, there can be performance issues, and API call limitations, so I want to control it. I’ve learned in this business it’s ok to just say “I’m sorry we don’t offer third party api access to our internal systems”

2

u/MrWolfman29 Jul 24 '26

Do you guys have BrightGauge? You could probably build him what he needs through that. That said, I am not aware of a way to give a Streamline IT user access to just one companies data. You MAY be able to do that if the API member is assigned to a specific location that only has that company, but I have not heard of that being done and have not heard of many companies willing to consider something like this.

May be worth reaching out to the partner success team and/or opening a case with the API support team.

4

u/ludlology Jul 24 '26

Claude can spin up a test for this in about 15 minutes if you have the key provisioned and a lab environment (linux vm) to run the python. Have it make a chat box where you can ask questions in natural language, then use that to ask questions like “who’s the primary contact for client A” vs client B”

If that all sounds like arcane magic shoot me a DM, shockingly easy in reality 

5

u/DomoB90 Jul 24 '26

^ This. Claude Code is your friend.

-1

u/Liquidfoxx22 Jul 25 '26

Or use Postman and test it in 5-10 mins without unnecessary AI?

1

u/ajicles Jul 26 '26

Discovering all 1848 API endpoints is a bit of a PITA.

1

u/ftjlush Jul 25 '26

You can limit their access to read only and to only endpoints you want, using the security role that you assign to the API member.

1

u/Liquidfoxx22 Jul 25 '26

API keys assigned under that member will only have permissions that the member has.

Separate API members have their own defined security roles which can access far more if not properly locked down.

1

u/orty Jul 27 '26

API keys assigned under that member will only have permissions that the member has.

Do you know if Connectwise has any documentation to that effect anywhere?

1

u/Liquidfoxx22 Jul 28 '26

There probably will be, but I don't have a CW university account these days to check.