How to restrict APIs at the Tenant level in Orchestrator?
Here are the steps to restrict APIs at the tenant level in Orchestrator:
- Integrate a confidential external application without application scopes.
- Then, import this confidential external application into different folders across Orchestrator, spanning various tenants.
- Subsequently, assign roles (permissions) to these imported external applications based on specific scenarios.
- When requesting a token, ensure to request only the OR.Default scope.
- This approach ensures that assignments for the external application in Orchestrator are verified at both the tenant and folder levels.