How to Create a User With Limited Entitlements For REST API Calls

First, as our documentation states, a Learn admin should never be told to associate a user with Learn admin privileges with any REST API integration, see this document. Hence we often get questions from folks on how to create a user to associate with a REST API integration that has limited capability on a Learn system. One way is to research and design your REST application to use OAuth 2 3-legged Authentication. See the documents referenced below. 3LO guarentees that the user using your REST Application can only do what they can do via the Learn UX when they are logged into Learn.

However, if your application is using our OAuth 2 2-legged Authentication read on. Or I should say, watch on. I created the following to answer the question “Is it possible to create a user that has only the necessary permissions and avoid using “Learn System Admin” user?”

The answer is yes! Here’s a video explaining exactly how to proceed.

Reference Documentation:

• Managing REST Integrations in Learn: The REST Integrations Tool for System Administrators
• Basic Authentication with REST
• Three-Legged OAuth
• https://github.com/Kong/mashape-oauth/blob/master/FLOWS.md
• REST Tutorials
• Bookmarklet to help map entitlements to permissions