Creative Force offers the flexibility to connect to your desired vendor or platform, even when they dont have an official integration with us. As part of the setup steps for connecting via our Gateway API, you will need to configure a User in Creative Force for us to take actions on behalf of.
User Overview
When a vendor connects using the External Post Vendor API, the system allows for a client's credentials to be used as a method of authentication as part of the integration. You can read more on getting started with Client Credentials Flow in Creative Force here.
As a best practice, we recommend setting up a new dedicated user account to register the app on behalf of, rather than using an active account or existing user.
This ensures that permissions and client access can be restricted to only those required for the purpose of connection to Creative Force’s Gateway API. From a security standpoint, this practice helps to reduce the risk of potential data leaks.
Below, we’ll cover the recommended approach when setting up this user account in Creative Force.
Create New User Role
First, you’ll need to create a new User Role that you will assign to the External Post API Vendor’s user. This Role can be named to your preference; in our example below, we’ve called this role 'API User.'
Next, you’ll determine the access the user assigned to the Role will have. It is recommended that you only allow the permissions necessary for the API integration, which can be found under the Developer API tab of the User Role settings screen.
Developer API Permissions
The API user will need 'Edit' access for the following permissions:
Module | Required | Optional |
ECOMM |
|
|
EDITORIAL |
|
|
Create New User
Once you’ve created the User Role, head to Studio Settings → Users to create the user account for the API Connection.
Under 'User Role,' select the API User Role created earlier.
Once the user has been created, you’ll want to ensure that all Skills are disabled:
Lastly, you’ll need to determine the Workspace access under the User Groups tab. It would be recommended to only enable access for the Workspace this vendor will be working with.
Add to Registered App
Once the previous steps have been completed, you can register the App on behalf of the API User account.
