Is necessary for a user being a designer (if it can be a viewer) to run a startprocess function from an external webapi to execute a process, because if this person is a designer (and we only want him to have execution rights, no more) he will be able to modify objects when he logs into Appian, even change the code of some objects without security, like CDT´s.
Regards,
Rebeca
Discussion posts and replies are publicly visible
Hi rebecar369,
It is not necessary to be a designer , u have to create a service account and have to generate API-key against that service and map the business service with that service account.
Best Regards
Abhishek
It's correct that it is not necessary to be a member of the designers group to send a request to an Appian web API.
It's not required to use an API key. That is one of the supported methods to authenticate to the API. For example, basic preemptive authentication is supported.
However, the user calling the API must have the necessary entitlements to do so. If the API initiates a process, then the credentials used to call the API must also have permission to start the process.