Administrator Permissions

Note
You must have the Owner role to create or modify an API application within the Duo Admin panel.

Login as an administrator user and log into the Duo Administrator Panel. Ensure that the administrator creating the new Administrator API integration has the following permissions:

• When Manage Administrator Users is enabled

  • Grant Administrators

  • Grant Read Resource

  • Grant Write Resource

• When Manage Administrator Users is not enabled

  • Grant Read Resource

  • Grant Write Resource

Note
For read only operations, the 'Grant Write Resource' permission is not required.

For Activity Insights

An administrator requires the following permission to utilize the Activity Insights:

Scope	Description
Grant read log	The Admin API application can read authentications, offline access, telephony, and administrator action log information.

For more information on configuring Activity Insights, refer to Activity Insights Settings.