Access and Administration APIs control who can use BigPanda and what they can do — users, roles, keys, identity, accounts, and the audit trail.Choose the right user-management surface first:
Users (SCIM) when your identity provider is the source of truth — SCIM 2.0 provisions and deprovisions automatically.
Users for direct management — invite, activate, update, and remove users with the v2.1 APIs.
SSO & JIT Provisioning to configure single sign-on and just-in-time role and domain rules, whichever user surface you use.
Then layer on Roles & Permissions (what each user can do), API Keys and Service Accounts (programmatic access), Accounts & Organizations (org-level structure and settings), Products & Entitlements (which products each account and user can use), and Audit Log (who did what, when).Most endpoints here require a User API Key whose role carries admin permissions; an Org Token is not sufficient.
