Skip to main content
Question

Roles unclear for Secret Api Keys

  • February 3, 2026
  • 1 reply
  • 8 views

Forum|alt.badge.img+1

How are we supposed to determine which roles are required for which endpoints? The descriptions for configuring roles via the dashboard are vague and do not match the apis whatsoever.

1 reply

hussain
RevenueCat Staff
Forum|alt.badge.img+6
  • RevenueCat Staff
  • February 5, 2026

Hi ​@chris-kasdn2137,

Thanks for reaching out. Sorry about this. I understand how the permission/role descriptions for Secret API keys can feel vague compared to the actual REST APIs.

If you can share which endpoints (or your intended use case) you need, I can tell you exactly which Secret API key permissions to enable so you can follow least-privilege.

Looking forwards to hearing back from you.

Best,

Hussain