API KEY with restricted permissions to Admin REST API

Getting advice
1

Is there any way to create an API KEY to request only a subset of admin REST APIs?

For example, I intend to list all users (and their profile data such as given name, family name, etc.) using an API KEY created for this purpose only. Then I will use this key from the client-side to retrieve the users and display their information.

2

why not have a specific client, making profile as the default scope ?and using nessary user attribute mapper in that profile scope?

1 Like