Readonly API user

[DidierDE]

Is it possible to create an API client ID with readonly rights to the full system? I am trying to monitor our system with zabbix, but it seems that the Client ID needs system onwer rights to be able to monitor everything. Can I create a user that can read everything a system owner can read, but with no rights to change anything?

 

[Alphabetic]

As per https://www.3cx.com/docs/configuration-rest-api/

You have 2 types of tokens

Authentication Tokens​

The Configuration API supports two types of tokens for secure access:

• Multi-Company Admin Tokens: Enable full access to manage all departments and entities across the 3CX system, suitable for administrators in multi-company environments.
• User Tokens: Grant access limited to the user’s assigned roles and departmental permissions, providing controlled access to specific configuration tasks.

Permission is granted based on the role you select if choosing user tokens.

I dont think there's anywhere to set read only.

 

[DidierDE]

For obvious security reasons, I don't like using an account with more rights than necessary for monitoring purposes.

So for this use case, a possibility to create an api user that can monitor the entire system, but has no rights to change anything, would be very usefull...