What you'll achieve
Create a key for each person on the team, revoke it when they no longer need it and rotate your webhooks' signing secret.
Before you start
- Have an Administratorkey. The section Settings and keys doesn't appear with other roles.
- Have a password manager at hand to save the new keys.
Steps
- Go to Settings and keys in the sidebar. Screenshot: key list
- In Key name type who will use it (for example, «Ana, customer service»).
- Choose the Role with the minimum permission they need: Read-only, Editor or Administrator.
- Click Create key.
- Copy the key that appears and save it in your password manager. It's only shown once; once you click I've saved it it can no longer be recovered. Screenshot: new key
- Share it with the person through a secure channel.
- To remove access, click Revoke on that key's row and confirm.
- To rotate the webhooks secret, click Rotate secret, confirm, copy the new secret and update it in the system that receives your data.
Expected result
The new key works immediately with its role. A revoked key stops working instantly and is crossed out in the list.
Common issues
I can't revoke my own key
That's on purpose, because you'd lose access. Do it with another administrator key.
I lost the key I just created
It can't be recovered. Revoke it and create another.
After rotating the secret, my system rejects the sends
It's still using the old secret; update it.
When to contact support
If you lost all administrator keys, write to us so we can help you recover access.