
fagiz (fagiz) asked a question.
Which administrator roles allow editing the trusted origins for OAuth? I have complete admin access to our dev tenant, and am able to edit origins there, but in our production tenant, I only have admin roles of "API Access Management Admin" and "Group Admin", and do not have ability to edit trusted origins. Specifically, there is no "Trusted Origins" tab under Security->API, and attempting to hit the /api/v1/trustedOrigins endpoint results in a 403 with a message of "You do not have permission to perform the requested action".

I believe it's Super Administrator and Organization Administrator opens up the ability to edit Trusted Origins in API section.
I just confirmed with my test user. Those were the only two roles that showed the tab. Group administrator lets you go into API under Security, just the "Trusted Origins" tab is missing.
Has anyone been able to achieve this without using the Superuser role?