ExtraHop Trace Admin UI, Руководство пользователя

Страница: 38 / 58

ExtraHop 8.8 ExtraHop Trace Admin UI Guide 38
• To add a specific URL, type an origin URL in the text box, and then click the plus (+) icon or press
ENTER.
The URL must include a scheme, such as
HTTP
or
HTTPS
, and the exact domain name. You cannot
append a path; however, you can provide a port number.
• To allow access from any URL, select the Allow API requests from any Origin checkbox.
Note: Allowing REST API access from any origin is less secure than providing a list of
explicit origins.
3. Click Save Settings and then click Done .
Generate an API key
You must generate an API key before you can perform operations through the ExtraHop REST API.
Keys can be viewed only by the user who generated the key or by system administrators with unlimited
privileges. After you generate an API key, add the key to your request headers or the ExtraHop REST API
Explorer.
Before you begin
Make sure the ExtraHop system is configured to allow API key generation .
1. In the Access Settings section, click API Access .
2. In the Generate an API Key section, type a description for the new key, and then click Generate .
3. Scroll down to the API Keys section, and copy the API key that matches your description.
You can paste the key into the REST API Explorer or append the key to a request header.
Privilege levels
User privilege levels determine which ExtraHop system and administration tasks the user can perform
through the ExtraHop REST API.
You can view the privilege levels for users through the
granted_roles
and
effective_roles
properties. The
granted_roles
property shows you which privilege levels are explicitly granted to the
user. The
effective_roles
property shows you all privilege levels for a user, including those received
outside of the granted role, such as through a user group.
The
granted_roles
and
effective_roles
properties are returned by the following operations:
• GET /users
• GET /users/{username}
The
granted_roles
and
effective_roles
properties support the following privilege levels. Note
that the type of tasks for each ExtraHop system vary by the available resources listed in the REST API
Explorer.
Privilege level Actions allowed
"system": "full"
• Enable or disable API key generation for the ExtraHop system.
• Generate an API key.
• View the last four digits and description for any API key on the
system.
• Delete API keys for any user.
• View and edit cross-origin resource sharing.
• Transfer ownership of any non-system dashboard to another
user.
• Perform any administration task available through the REST API.
• Perform any ExtraHop system task available through the REST
API.