Third-party access via APIs

You can set up third-party read-only API access to your Sophos Central account. For example, you may want to allow a cyber insurance provider to assess and monitor your organization's security posture.

Set up read-only API access

1. Go to My Products > General Settings > API Credentials Management.

2. If prompted, accept the Terms of Use Agreement & Privacy Policy. Otherwise, go to the next step.

   

3. Click Add credential.

4. On the Add credential dialog, do as follows:

   1. Enter the name of the credential.
   2. (Optional) Enter a description for the credential.
   3. In Role, select Service Principal ReadOnly.
   4. Click Add.

   

5. On the API credential summary page, copy the Client ID and Client Secret values.

   Note

   The secret is only shown once. Make sure you keep it somewhere safe.

   

6. Follow the third party's instructions to securely transfer the API credentials, for example in an HTTPS web form.

   Make sure you use the correct API host for the tenant's data region. See the following section.

API hosts for data regions

The following table shows you the corresponding API host for each data region. For more information, see How Our APIs Work.

What's shared

The ReadOnly API role can read a range of data, but not add, remove, or change it. Mainly, you're allowing the third party to see:

• Alerts and events
• Account health check results
• Device details
• Policy configuration

The third party may not look at all the information provided via APIs. Please speak with them to understand exactly what they'll access and how they'll use the data.