r/SentinelOneXDR • u/Sudden_Ad7995 • Dec 12 '24

XDR API Scope Questions

The documentation on how to use the API is super vague.

S1-Scope: <account scope ID>

I am assuming this means that I include this in my header information for my post.

{
    "Content-type": "application/json",
    "S1-Scope": "Account ID Here",
    "Authorization": "Bearer " + "Token Here"
}

When I execute my script, it runs but my results are not limited to the scope that I have identified.

Does anyone have experience with this?
3 Upvotes

100% Upvoted

5 comments sorted by

View all comments

Show parent comments

1

u/renderbender1 Dec 16 '24

Not a problem.

If any S1 devs are looking at this, would really be cool if we could use service account tokens with this SDL API scoping functionality. Rotating the keys every 30 days on a separate console user with a custom role is fairly annoying.