cnMaestro API Permissions

We’re looking at using the cnMaestro API to allow us to centralize monitoring through a different platform. We only want to do monitoring/statistics pulls, no configuration changes. Is there any RBAC, or is it full-admin or bust?

@Mickey_Rigoulot at this point we have only full-admin permission on API Keys. We are adding RBAC for API keys also - 1H of 2026 target. For your use case, would a read-only API be sufficient? do you have use cases where the key needs scope (e.g. specific sites, networks, tenants etc. or Switch only etc.)?

For us, it would be RO on a global level, no segmentation of permissions required between networks/sites.

1 Like