DNA Center API authorization and accounting questions

[kenji8462]

Hello everyone,

We have some question about the DNA Center API.

We know that we can use the API to connect to DNA Center and get some information that you need, or change some configuration.

We also know that we need to get the credential to authenticate before we use the API.

But we want to know that if there is some authorization and accounting mechanism about DNA Center API?

For example, if I use the read-only credential to connect to DNA Center through API, and I can only use the Get command to get some information but can not change configuration.

Also, if someone use the API to get information or change configuration, where can I check  who use the API to connect to DNA Center and what did he/she do?

thanks

[omz]

You could configure RBAC role-based access on DNAC for API access.

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center-platform/2-1-2-0/user_guide/b_dnac_platform_ug_2_1_2/b_dnac_platform_ug_2_1_1_chapter_010.html#id_129796