Allow mgmt API only user

[User1234]

Greetings! When managing users in the smart console, the permissions profile allows to deactivate or activate management api access ("Management API Login"). Is it possible to create API only profiles? Therefore a profile that allows api logins but no smartconsole logins.

[the_rock]

Not sure if below might be what you are after?

Andy

 

[Bob_Zimmerman]

That controls whether the user can authenticate to the API at all. The other permissions control what the user can do via either SmartConsole or the API. I don't believe there's any way to allow a user to log in and do stuff via the API, but not via SmartConsole.

[PhoneBoy · Accepted solution]

Short answer: no.
Permission Profiles can have API access in addition to SmartConsole access, but not exclusively API access.

In R80.40 and above you can use API keys for authentication, which cannot be used with SmartConsole.
So, in theory, you could create a user that you don’t give the password to but only give an API key to.

[User1234]

Pity. Do you know if there are any plans to do so?

[PhoneBoy]

Not aware of specific plans.
If this is a need, I recommend working with your local Check Point office.