Creating an API User in Ivanti EPMM
As a best practice, you should create an API User for use solely between Lookout and Ivanti EPMM. This ensures that communication between Lookout MES and Ivanti EPMM is restricted to a single set of credentials.
- Log in to the Ivanti EPMM Admin Portal.
- In the top navigation tabs, click Devices & Users > Users > Add > Add Local User:
- Enter the following settings:
Field Value User ID MESAPI First Name MES API Last Name User Password, Email (Use a familiar set of Admin credentials) The system creates the new user and assigns the User Portal role.
- In the top navigation tabs, click Admin > Admins.
- Check the new MES API User and click Actions > Assign to Space:
The Assign to Space - MES API User window appears.
- In the Select Space: dropdown, select Global.
- Enable permissions based on the version of Ivanti EPMM that you are using:
- For Ivanti EPMM 9.6+, check the following permissions:
Admin Role Selected Permissions Device Management - View device page, device details
- View dashboard
Privacy Control - View apps and ibooks in device details
Logs and Events Management - View Audit logs
- View events
Other Roles - API
- For versions below 9.6, check the following permissions:
Admin Role Selected Permissions Device Management - View device page, device details
- View dashboard
Privacy Control - View apps and ibooks in device details
App Management - Manage app
Logs and Events Management - View Audit logs
- View events
Other Roles - API
- If you are using Custom Attributes for device state sync (see Creating Custom Attributes or Labels for Device State Sync), assign the role of Manage custom attributes by following this Ivanti procedure, Assigning a custom attributes role.
Also, you must assign the role of Edit custom device attribute values (located under the Device Management section of the Edit Roles popup) to the API user.
- For Ivanti EPMM 9.6+, check the following permissions:
- Click Save.
