Api - How to log and how does it work with Accounts?

[Don_Martin]

Hello,

I would like to know if the usage of the WebApi is bind to concurrent Userpermission sets and if those will restrict the possibilitys for the commands in General. E.g. one Account has only Viewer rights so he should be able to pull informations but must not be able to change anything at all where as a global admin account could.
And the other thing is: Where can one see, which account has used which WebApi Command? It as absolutly vital for us to have this logged for plausibility checks and likewise and the Audit just logs just records, when a user has logged in but not that the account did use WebApi commands. Where can I specifically select wether or not Account A is allowed for WebApi comands but definietly not Account B to Z?

English is not my native language so please feel free for asking more Details when needed (and don´t mind the mistakes).

greetings

[rackroyd]

Web API commands follow all role-based permissions as enforced through the McAfee ePO server graphical interface.

wrt auditing, i'm not sure you can track that to the level you require. Best you discuss further with McAfee support through a service request.