ALLOWED ROLES
List of roles that can connect
Super Admin
Admin - role with following permissions under Admin Console Privileges
Organisation Units : Read
Users : Read
Skip the services section
Security : User Security Management
Security : Security Settings
Domain Settings
Reports
And following permissions under Admin API Privileges
Organisation Units : Read
Users : Read
Groups : Read
Skip the services section
User Security Management
Licence Read
Billing Read
Domain Management
Domain Allowlist Read
NOTE :
You can verify permissions here by clicking on the role which is assigned to the user
Make sure assigned user has access to all organizatioal units
STEPS TO CREATE A CUSTOM ROLE
Login to Admin Dashboard .
Click on Accounts -> Admin Roles
Click on create a new role.
Give relevant name and description for the role
Under Admin Console Privileges select the following
Organisation Units : Read
Users : Read
Skip the services section
Security : User Security Management
Security : Security Settings
Domain Settings
Reports
Under Admin API Privileges select the following
Organisation Units : Read
Users : Read
Groups : Read
Skip the services section
User Security Management
Licence Read
Billing Read
Domain Management
Domain Allowlist Read
Click on create role
Assign the role to the user who is going to connect the integration.
When assigning the role make user is is added to all organisational units
You can refer to this video for better understanding.