Skip to main content
Question

Roles unclear for Secret Api Keys

  • February 3, 2026
  • 1 reply
  • 88 views

Forum|alt.badge.img+4

How are we supposed to determine which roles are required for which endpoints? The descriptions for configuring roles via the dashboard are vague and do not match the apis whatsoever.

This post has been closed for comments

1 reply

hussain
RevenueCat Staff
Forum|alt.badge.img+6
  • RevenueCat Staff
  • February 5, 2026

Hi ​@chris-kasdn2137,

Thanks for reaching out. Sorry about this. I understand how the permission/role descriptions for Secret API keys can feel vague compared to the actual REST APIs.

If you can share which endpoints (or your intended use case) you need, I can tell you exactly which Secret API key permissions to enable so you can follow least-privilege.

Looking forwards to hearing back from you.

Best,

Hussain