Access model data outside of assigned workspaces?

Eric87

I'm using the Integration API 2.0 to list workspaces https://anaplan.docs.apiary.io/#ListUserWorkspaces

/workspaces
"Retrieves all workspaces a user has access to within the user's default tenant."

I'm only assigned to 2 workspaces (which are the only ones visible in the UI also), but this endpoint is returning everything. Possibly because my user is a Tenant Admin, Tenant Security Admin, User Admin and Workspace Admin (though this last one only in 2 workspaces)?

I can get all the models under these workspaces as well, but nothing below that (e.g. exports, files etc). These all error out with a 404 Not Found error.

I found the SCIM API which has an endpoint to get "a single user and workspace details".

https://scimapi.docs.apiary.io/#get-single-user-and-workspace-details

"Use this endpoint to retrieve all user information and associated workspaces. In this example, Barbra Jensen is associated with two worksapces, Finance and Sales."

This endpoint gives me exactly the workspaces I am assigned to.

Is this endpoint correct? Can I access data fully only from these workspaces? Do I need to be assigned to a workspace (as an admin?) to access data in the models within it? Or am I missing something here and there's a more granular control?

alexpavel

@Eric87 : to read objects in a model (like files, imports, exports) the user needs to have access to that model. it is not necessary to be admin, but the user needs to have access to the objects. So, yes: your user need to be setup with some access on all the models under which you want to extract additional information.

As Tenant Admin, you can see additional information that your user does not have access: like workspaces / models but not more than this.

Hope it helps,

Alex