Agile Central - Api Keys: Security Question. Will api key work for a disabled user?

Document ID : KB000108134
Last Modified Date : 27/07/2018
Show Technical Document Details
Question:
Will the Api Key work if belongs to a user that's disabled or locked?
Answer:
NO.

The Api Key will works only when the user that it belongs to is fully functional and in good standings. Disabled or Locked users can not operate their Api Keys. When the user is functional, enabled and in good standings the api key will work. In that condition the Api Key can either be used for Full Access or Read-Only Access.

Full Access will equal the capabilities under this key to those of its user based on his/her permissions.
Read-Only key will not allow creating or modifying objects.

You can learn more on the reasons to consider generating Read-Only access key here:
https://comm.support.ca.com/kb/agile-central-wsapi-why-should-we-generate-a-read-only-api-key/kb000098242
Additional Information:
More on Api Keys: https://help.rallydev.com/external-api-keys
Api Keys FAQ: https://comm.support.ca.com/kb/api-key-and-oauth-client-faq/kb000011568