When invoking requests to the BigPanda Public API, in order to be authorized, an HTTP Authorization header must be included with a specific API Key.

Currently, only v2.0 APIs support API Keys. Some APIs may instead leverage the Org Token Authorization token. See each API endpoint to determine which Authentication type is required.

Relevant Permissions

Roles with the following permission can access API Keys page in BigPanda Settings:

Permission access levels can be adjusted by selecting either View or Full Access. To learn more about how BigPanda's permissions work, see the Roles Management guide.

Manage API Keys

API keys are managed directly through the BigPanda console and can be generated, deactivated, and deleted by administrators.

To access the API Keys screen:

1. In the upper right-hand corner of the BigPanda UI, click the Settings cog icon and select API Keys from the dropdown.
2. Existing API Keys will be listed in the left pane, along with a Search bar. In this section, you can Create a New API Key as well as Edit or Delete existing keys.
3. Click any API Key in the list to see the details of the key, displayed in the pane to the right. In this section, you can edit, activate, or deactivate the key.

Create a New Key

An API Key is activated only when it is assigned explicitly to an active user. Upon activation, the role of the user making the API request is authenticated and authorized. A single user can be assigned more than one API Key.

1. In the API Keys menu, select the New Key button.

2. Enter a Key Name.

3. Select the Associated User to assign the key to. The dropdown will contain all active users in the system to choose from.

4. Optionally, enter a short description to identify this key.

5. Select Create Key.

6. The generated key will be presented to you at this time. Be sure to copy and save it now as this will be the only time it will be available to you.

   See the Authentication and Headers page in our API Reference to learn more.

❗

Copy and Save API Keys

Once the Create Key button is selected after filling out the fields in the menu, the generated key will only be exposed and shared in its full form once in the following pop-up. It is important to copy and safely store this key. BigPanda does not store a copy of the key for future reference.

👍

Key Usage

The frequency of key usage can be monitored easily - a call to the Public API will update the Last Used timestamp in the details section of the respective API Key used during the call.

Delete a Key

To delete and deactivate an existing key:

1. Select or search for the desired key in the API Keys list.
2. Select the Delete (trash can) icon.
3. Type DELETE in the field to confirm and authorize the deletion. The field is case-sensitive.

🚧

Once a key is deleted, the action is permanent and not reversible.

Keys associated with users that have been deleted will automatically become inactive and no longer work.

Activate and Deactivate a Key

To deactivate an existing key without deleting it:

1. Navigate to the desired key and select it.
2. In the details pane to the right, click the Active toggle.
3. (Optional) Click the Active toggle at any time to reactivate the key

🚧

If an active key is deleted, it cannot be regenerated. If the key that was deleted is associated with an external system, create a new key and update the key field on all external systems that make calls to BigPanda’s Public API.

Next Steps

Find your way around the BigPanda Settings screen

Read through the Introduction to BigPanda APIs

Learn about User Management in BigPanda