Application OAuth Access

To request access please use your support form or contact: api-access@crbn.systems

The CRBN Elements team will provision a Client ID and a Client Secret that will be unique to your application. Protect the ID and Secret carefully - they provide the full access to your application and should never be accessible to an end-user.

This will allow your application to be invited to be granted one or more roles into their applications. Should a user grant access to your system, your system will have the full privileges they assign.

Currently to set-up access for your account, present the user with a screen that includes:

• The name of your application

• The name of the role(s) that your application is requesting

• A short description of what those roles do

• A short description of why those roles are being granted

• Link to your Privacy Policy

• Link to your Terms of Use

• Link to where to find billing information (if not a free service)

Ensure that your application follows the PoLP (Principle of Least Privilege)/Minimum Necessary. CRBN Elements may, from time to time at its sole discretion, request a review of the permissions you have requested through your role(s) and a justification for their use.

N.B. This will be updated in future releases to only allow access grants to occur through a CRBN Elements user interface.