In the following scenario, which unit is best to create a unit for an APIM product?

@fool1241 Instead of creating operation-specific subscriptions and managing roles implicitly as such (illustrated in Idea B ), I'd recommend that you implement your Idea A mainly because it uses the logical subscription-to-product concept built-in APIM for what they are for by design so it's more future-proof. Also, when leveraging policies, it wouldn't require duplicate API operations grouped by products as shown in the picture above. Did you have any specific concerns with Idea A ?

Accepted answer

Mike Urnun 9,811 Reputation points Microsoft Employee

2020-12-15T02:52:01.657+00:00

@fool1241 Instead of creating operation-specific subscriptions and managing roles implicitly as such (illustrated in Idea B), I'd recommend that you implement your Idea A mainly because it uses the logical subscription-to-product concept built-in APIM for what they are for by design so it's more future-proof. Also, when leveraging policies, it wouldn't require duplicate API operations grouped by products as shown in the picture above. Did you have any specific concerns with Idea A?
Please sign in to rate this answer.

1 person found this answer helpful.
Mike Urnun 9,811 Reputation points Microsoft Employee

2020-12-16T00:46:18.993+00:00

Hi @fool1241 Just checking in and following up on the answer above, let me know if you had any particular concern with your Idea A.

fool1241 81 Reputation points

2020-12-16T04:49:22.907+00:00

Thank you for answering.

For Idea A, how to implement control of user roles (Admin, Write, Read) is an issue within my team.

Mike Urnun 9,811 Reputation points Microsoft Employee

2020-12-16T19:47:53.197+00:00

@fool1241 You can create groups for each role and associate them with their respective products: How to create and use groups to manage developer accounts in Azure API Management

If you use Active Directory, you can use the <validate-jwt> policy and check for roles through policies as well: https://learn.microsoft.com/en-us/azure/api-management/api-management-access-restriction-policies#ValidateJWT
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

In the following scenario, which unit is best to create a unit for an APIM product?

0 additional answers

Your answer