¶ Managing Applications
Administrators manage all consuming applications, API credentials, and access security across the platform.
¶ Admin Capabilities
¶ 1. View All Applications
Application Directory:
Registered Applications: 67
Filter:
- Status: Active, Inactive, Suspended
- Access Level: Read, Write, Admin
- Created Date
- Last Activity
Search by:
- Application name
- Owner email
- API key prefix
Application List View:
- Application name and ID
- Owner and team
- Status badge (Active, Inactive, Suspended)
- Number of granted products
- Last activity timestamp
- API call volume (30 days)
- Quick actions (View, Suspend, Rotate Credentials)
¶ 2. Creating an Application
Step 1: Navigate to Create Application
Click "Create Application" button from applications list.
Step 2: Fill Application Information
Create Application:
Basic Information:
Name: [Analytics Dashboard]
• Descriptive name for your application
Description: [Real-time analytics dashboard for business intelligence
and reporting. Provides visualizations and insights
based on customer transaction data.]
• Clear description of application purpose
Owner: [john.doe@company.com] [🔍 Search Users]
• Application owner (defaults to you)
[Cancel] [Create Application]
Step 3: Application Created
✓ Application "Analytics Dashboard" Created Successfully!
Application Details:
Name: Analytics Dashboard
Client ID: app-analytics-dashboard-001
Status: Enabled
Important Security Information:
⚠️ Secret Key (Copy and Save Securely):
┌─────────────────────────────────────────────────────────┐
│ sk_live_a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0 │
│ [📋 Copy to Clipboard] │
└─────────────────────────────────────────────────────────┘
⚠️ This secret key will only be shown once!
Store it securely - you cannot retrieve it later.
If lost, you'll need to regenerate a new secret key.
¶ 3. Application Details
Comprehensive Application View:
Application: Business Intelligence Dashboard
ID: app-bi-dashboard-prod
Status: Active
Credentials:
API Key: elx_prod_1234...xxxx (masked)
Created: 2024-06-15
Last Rotated: 2024-12-20
Expires: 2025-06-20
Access:
Granted Products: 23
API Calls (30d): 6.4M
Rate Limit: 1000/min
Exceeded Limit: 0 times
Team:
Owner: bi-team@company.com
Contributors: 5 users
[View Access Log] [Rotate Credentials] [Suspend Access]
Detailed Metrics:
- API call history (hourly, daily, monthly)
- Response time distribution
- Error rate analysis
- Product access patterns
- Peak usage times
- Bandwidth consumption
¶ 3. Security Actions
Administrators can take immediate security actions:
Admin Actions:
- Suspend application access
- Revoke specific product access
Suspend Application Access:
Suspend Access:
Application: Business Intelligence Dashboard
Current Status: Active
Owner: bi-team@company.com
Reason for Suspension:
☐ Security concern
☐ Policy violation
☐ Non-payment
☐ Owner request
☑ Other: [Investigation pending]
Actions:
☑ Immediately revoke all product access
☑ Invalidate current API credentials
☑ Notify application owner
☐ Schedule automatic reactivation: [Date]
Notes:
[Investigation into unusual API patterns...]
[Confirm Suspension] [Cancel]
Revoke Specific Product Access:
Remove access to individual products without suspending entire application:
Application: Business Intelligence Dashboard
Current Product Access: 23
Revoke Access To:
☑ Customer Transaction History
☐ Product Catalog
☐ Inventory Management
Reason:
☐ No longer needed
☐ Security concern
☑ Policy change
☐ Other: [...]
☑ Notify application owner
☑ Log audit entry
[Revoke Selected] [Cancel]
¶ 4. Usage Analytics
Application Usage Report:
Application Usage Report:
Top 10 Applications (by API calls):
1. BI Dashboard: 6.4M calls
2. Fraud Detection: 4.2M calls
3. Revenue Reporting: 2.7M calls
4. Customer Analytics: 2.1M calls
5. Marketing Automation: 1.8M calls
6. Mobile App: 1.5M calls
7. Data Science Platform: 1.2M calls
8. External Partner Integration: 890K calls
9. Compliance Reporting: 654K calls
10. Executive Dashboard: 523K calls
Inactive Applications:
- 5 apps with no activity in 90 days
- Recommendation: Review and deactivate
Security Alerts:
- 2 apps with rate limit violations
- 1 app with unusual access patterns
- 3 apps with credentials expiring in 30 days
[Export Full Report]
¶ Application Lifecycle Management
¶ Registration
New Application Registration:
Register New Application:
Basic Information:
Name: [New Analytics Tool]
Description: [Internal analytics and reporting platform]
Owner Email: [analytics@company.com]
Team Members: [user1@..., user2@...]
Environment:
☑ Production
☐ Staging
☐ Development
Security Settings:
Rate Limit: [1000] requests/minute
IP Whitelist: [Optional]
Credential Expiry: [365] days
Initial Access:
☐ Request product access now
☑ Application can request access later
[Register Application] [Cancel]
Generated Credentials:
✓ Application Registered Successfully
Application ID: app-analytics-tool-prod
API Key: elx_prod_a1b2c3d4e5...
IMPORTANT: Save these credentials securely!
- API Key will only be shown once
- Store in secure credential manager
- Never commit to version control
- Rotate credentials regularly
[Download Credentials] [Copy to Clipboard] [Email to Owner]
¶ Deactivation
Graceful Deactivation:
Deactivate Application:
Application: Legacy Analytics Tool
Reason: ☑ Replaced by new system
Deactivation Plan:
1. Notify owner: [30] days in advance
2. Mark as deprecated: [2025-02-15]
3. Revoke access: [2025-03-15]
4. Archive: [2025-03-30]
☑ Send migration guide
☑ Offer support for transition
☑ Archive access logs
☐ Delete permanently (not recommended)
[Schedule Deactivation] [Cancel]
¶ Security Best Practices
¶ Credential Management
Rotation Policy:
- Regular rotation: Every 6-12 months
- Immediate rotation: When compromise suspected
- Automated expiry: Configurable per application
- Secure distribution: Encrypted channels only
Security Checklist:
- ✓ Strong API key generation (256-bit)
- ✓ Encrypted storage
- ✓ Masked display in UI
- ✓ Audit logging for all credential operations
- ✓ Expiry notifications
- ✓ Revocation capability
¶ Access Control
Principle of Least Privilege:
- Grant minimum necessary product access
- Review access regularly
- Remove unused access
- Document access reasons
Monitoring Requirements:
- Log all API calls
- Track access patterns
- Alert on anomalies
- Regular security audits
¶ Incident Response
Suspected Compromise:
- Immediately suspend application
- Rotate all credentials
- Review access logs
- Identify affected data
- Notify stakeholders
- Document incident
- Implement preventive measures
¶ Next Steps
- create Request Access to connect application to data product.
- Configure Managing Users for user administration
- Review Security Best Practices