[API] edit and create user through API

[Maarten]

Hi all,

I am currently testing creating and editing User records through the API, but using the Basic authentication of an admin user.

I would like to use HMAC or API authentication, but these seem unable to edit and create (only read) the User entity.

Are there ways to change this behavior, and to use the more secure authentication mechanisms to edit and create users through API?

[yuri]

Hi Maarten,

I'd recommend creating a custom API endpoint for your need. A route and an action class for it. Then handle access control there somehow.

[yuri]

Another solution would be utilizing a workflow with a formula script.

E.g. an API user creates some record (e.g. UserChangeAction) that triggers a workflow rule that changes a user. A user ID is passed as a Link field.