What are the Permission Set required for developer role?

Questions
1

Hi, I am trying to create a new user which should have a limited access for a developer role. I am not sure what permission set restricts the sandbox access. Can you please suggest the permission set that shall not restrict sandbox access to a developer ?

2

At this time there isn’t any additional roles to restrict access to the Developer Dashboard. Only administrators have access to the Developer Dashboard. This is a very popular feature request and we hope to have more for you soon. :slightly_smiling_face:

3

Hello Bryan,

Thank you for your response. Our main concern is that the user that we are using with our web application has full access right now. This user can delete all our data. We want to create a service user that our web application can use to only call the following APIs

  1. Create a Customer API
  2. List Catalog API
  3. Create Booking API
  4. Booking Availability API

I understand that square may not have granular access to limit to only these APIs, we want to however limit updates and deletes and provide the least privilege to the user.

What have we tried:

  1. We tried to limit the user access, see the screenshot below. However the user is not able to access the developer dashboard, hence we cannot get the access token for the user when we limit the user to this access permission.

    Screen Shot 2022-11-27 at 11.33.17 AM
    Screen Shot 2022-11-27 at 11.33.17 AM1091×843 49.9 KB

  2. We tried to get the access token first with admin privilege (from the developer dashboard) then update the privilege and use the previously generated token but the token is providing full access even though we are limiting the user’s permission later to the one seen above in the screenshot.

Thank you! Please advise the best course of action here.

POST /v2/customers - Square API Reference

Creates a new customer for a business.

4

With Square the access token will give full access to the scopes of the Square account. If you’d like to limit the scopes a token has access to you’ll need to create one with OAuth and set the scopes you’d like the token to have access to. Currently there isn’t a way to do this in the Seller Dashboard. We’re constantly working to improve our features based on feedback like this, so I’ll be sure to share your request to the API product team. :slightly_smiling_face: