Access Management

API Access Management can be applied to Opsgenie integrations that can access Opsgenie Web API using their API keys. The following are the integrations that can access Web API along with their domain scope:

API Integration: All API domains within Opsgenie Web API including Alert API
Heartbeat Integration: Heartbeats API

You can restrict the domain scope and request type of the integrations above.

Restricting Access To Configuration Domains

If Restrict Access to Configurations option that is available above is selected for an integration, any kind of access to the following domains will be refused for this integration:

Users
Teams
Escalations
Schedules
Schedule Overrides
Forwarding Rules
Heartbeats
Notification Rules
Contacts
Integrations
Policies
Services

Limiting to Read-Only Access

If Limit to Read-Only Access option that is available above is selected for an integration, any kind of create, update or delete requests from this integration will be prevented for any domain. You can refer to the document of any API domain via Opsgenie Web API to see whether an API request is a read request or not.