# API Key / PAT with read all

**URL:** <https://developer.sailpoint.com/discuss/t/api-key-pat-with-read-all/95811>\
**Category:** SHF Discussion and Questions\
**Tags:** sailpoint-identity-security, apis\
**Created:** [January 2, 2025, 2:22pm UTC](https://developer.sailpoint.com/discuss/t/api-key-pat-with-read-all/95811 "2025-01-02T14:22:59Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![karinlipaz](https://avatars.discourse-cdn.com/v4/letter/k/c0e974/32.png) [@karinlipaz](https://developer.sailpoint.com/discuss/u/karinlipaz)\
**Post date:** [January 2, 2025, 2:22pm UTC](https://developer.sailpoint.com/discuss/t/api-key-pat-with-read-all/95811/1 "2025-01-02T14:22:59Z")

</div>

Hello,

I want to create an API for many of my scripts which will run on a few virtual machines. I don’t want to create multiple API keys, so I want to have a single API key with all the read permissions.  
Is there any way to use \*:read scope or something similar?

Thanks

---

<div class="post-metadata">

**Author:** ![vasanthrajsp29](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vasanthrajsp29/32/20713_2.png) [@vasanthrajsp29](https://developer.sailpoint.com/discuss/u/vasanthrajsp29)\
**Post date:** [January 2, 2025, 4:32pm UTC](https://developer.sailpoint.com/discuss/t/api-key-pat-with-read-all/95811/2 "2025-01-02T16:32:36Z")

</div>

Hi @karinlipaz,

Welcome to SailPoint Developer Community!

These two below options might be helpful for you,

sp:scopes:default - The default scope only grants permission for endpoints that do not require authorization.

sp:scopes:all - authorizes all scopes granted by the user’s assigned [user levels](https://documentation.sailpoint.com/saas/help/common/users/user_level_matrix.html)

-Vasanth

---

<div class="post-metadata">

**Author:** ![karinlipaz](https://avatars.discourse-cdn.com/v4/letter/k/c0e974/32.png) [@karinlipaz](https://developer.sailpoint.com/discuss/u/karinlipaz)\
**Post date:** [January 5, 2025, 8:16am UTC](https://developer.sailpoint.com/discuss/t/api-key-pat-with-read-all/95811/3 "2025-01-05T08:16:53Z")

</div>

Thank you so much Vasanth.

---

<div class="post-metadata">

**Author:** ![karinlipaz](https://avatars.discourse-cdn.com/v4/letter/k/c0e974/32.png) [@karinlipaz](https://developer.sailpoint.com/discuss/u/karinlipaz)\
**Post date:** [January 5, 2025, 11:29am UTC](https://developer.sailpoint.com/discuss/t/api-key-pat-with-read-all/95811/4 "2025-01-05T11:29:32Z")

</div>

Can I create a custom user level? I want to create a new service account just for it

---

<div class="post-metadata">

**Author:** ![sk8er23](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sk8er23/32/19357_2.png) [@sk8er23](https://developer.sailpoint.com/discuss/u/sk8er23)\
**Post date:** [January 5, 2025, 4:15pm UTC](https://developer.sailpoint.com/discuss/t/api-key-pat-with-read-all/95811/5 "2025-01-05T16:15:44Z")

</div>

> **[Managing API Keys and Tokens - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/common/api_keys.html)**
>
> SailPoint Identity Services Documentation

You do have options for api key use or PAT, not custom user levels but you can restrict permissions to what you need

---

<div class="post-metadata">

**Author:** ![vasanthrajsp29](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vasanthrajsp29/32/20713_2.png) [@vasanthrajsp29](https://developer.sailpoint.com/discuss/u/vasanthrajsp29)\
**Post date:** [January 5, 2025, 5:37pm UTC](https://developer.sailpoint.com/discuss/t/api-key-pat-with-read-all/95811/6 "2025-01-05T17:37:13Z")

</div>

Hi @karinlipaz,

We cannot create custom user level also we don’t have any documentation to do so, whereas we can customize service accounts authorization via PAT or API Keys. Where you can customize your access based on your requirement. For your reference you may use documentation mentioned by fellow ambassador.

I hope this clarifies.

-Vasanth

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [March 6, 2025, 5:37pm UTC](https://developer.sailpoint.com/discuss/t/api-key-pat-with-read-all/95811/7 "2025-03-06T17:37:47Z")

</div>

Closed on March 6, 2025, 5:37pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.