Roles and permissions

An access key acts with the roles of the admin who created it (Authentication). What an admin may do is every permission across their roles. Each endpoint in the API reference lists the roles that allow it.

Role	Holds
Owner	Every permission, including ones added later
Admin	Every permission except a few reserved for the Owner. Those the API needs are marked No below
Custom	The permissions picked for it in the admin app by an Owner or an admin allowed to edit custom roles. A permission added later is not added to it

Permissions the API needs

Permission	Owner	Admin	Endpoints
View cohorts, their programs and their members	Yes	Yes	GET /cohortsGET /cohorts/{id}GET /cohorts/{id}/participantsGET /cohorts/{id}/participants/emailParticipantsGET /cohorts/{id}/programsGET /cohorts/{id}/programs/{cohortProgramExtId}
Create, edit and delete cohorts, and assign programs to them	Yes	Yes	POST /cohortsPUT /cohorts/{id}DELETE /cohorts/{id}POST /cohorts/{id}/programsPOST /cohorts/{id}/programs/orderGET /cohorts/{id}/programs/unusedPUT /cohorts/{id}/programs/{cohortProgramExtId}DELETE /cohorts/{id}/programs/{cohortProgramExtId}
View the list of coaching users	Yes	Yes	GET /cohorts/participants
Add, remove, disable and re-invite coaching users	Yes	Yes	DELETE /cohorts/participantsGET /cohorts/participants/resendPreviewDELETE /cohorts/{id}/participantsPOST /cohorts/{id}/participants/emailsPOST /cohorts/{id}/participants/resendEmailsPOST /cohorts/{id}/participants/tokensPUT /cohorts/{id}/participants/{userExtId}/updateUserActivationStatus
Create, edit and delete webhooks, and view their deliveries	Yes	No	GET /organization_webhooksPOST /organization_webhooksPUT /organization_webhooks/{extId}DELETE /organization_webhooks/{extId}GET /organization_webhooks/{extId}/deliveriesPOST /organization_webhooks/{extId}/test

Endpoints without a role

Endpoint	Auth
GET /auth/auth_details	None (public)
POST /auth/coaching_sso_signup	The coaching user’s own token