Creating an API Role and User in Workspace ONE

As a best practice, Lookout encourages customers to use an API administrator user that you create specifically for the integration between Lookout and Workspace ONE. This ensures transactions related to the integration are associated to a single user/password credential.

If you use a password for API user authentication, note that any password complexity and expiration policies apply as usual. For more information on passwords in VMware Workspace ONE, see Admin / Console Security / Passwords in the VMware documentation.

Login to the Workspace ONE UEM Console using your administrator account.
In the left pane, navigate to Accounts > Administrators > Roles.
Click +Add Role.
The Create Role page displays.
Enter the role name Lookout_API_User and a description.

Under Categories expand API and select Rest, then check the following:


Read	Category	Name	Description
✔	REST	Admin	REST APIs for admin accounts
✔	REST	Apps	REST APIs for applications
✔	REST	Devices	REST APIs for device management
✔	REST	Groups	REST APIs for group management
✔	REST	Users	REST APIs for enrollment user accounts

Under Categories expand Device Management and click Bulk Management, then check the Edit column:
Scroll down and expand Settings, then click Tags and check both Read and Edit columns:
Click SAVE.
In the left pane, navigate to Accounts > Administrators > List View.
Click Add > Add Admin.
The Add/Edit Admin page displays.
On the Basic tab, enter the Username Lookout_API_User and values for all other required (*) fields for this Lookout admin user.

Lookout sends all Workspace ONE Connector events to the Email Address you enter here.
Click the Roles tab, then click Select Role and enter your new Lookout_API_User role:
In the Select Organization Group field, enter your main Workspace ONE organization group.
Click Save.

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Creating an API Role and User in Workspace ONE

lookout-footer