Community Spring Cleaning week is here! Join your fellow Maveryx in digging through your old posts and marking comments on them as solved. Learn more here!
The Product Idea boards have gotten an update to better integrate them within our Product team's idea cycle! However this update does have a few unique behaviors, if you have any questions about them check out our FAQ.

Alteryx Server Ideas

Share your Server product ideas - we're listening!
Submitting an Idea?

Be sure to review our Idea Submission Guidelines for more information!

Submission Guidelines

Alteryx Gallery API running as an account

In the Alteryx Gallery UI, it's possible to set up workflow credentials so that a workflow published to the gallery runs as a specific user.  

 

Unfortunately when that workflow is run from the Alteryx Gallery API, it appears to only ever run as the Alteryx Server Run-As account. 

 

Our developers in working with this figured out that if they called the (undocumented) API that runs the actual Alteryx Gallery directly, they can achieve what they want, but it seems a risky strategy.

 

The idea would be:

-Either unify the APIs so that the Gallery itself uses the same API to run workflows as what you present as the "Gallery API" (the eat your own dogfood way)

-Alter the Gallery API to enable us to run as a different workflow credential

 

Without this, we're forced to permission the run-as account to access anything that uses this method, which in turn then becomes a bit of a security hole (any workflow run will have access to everything that the run-as account uses) 

40 Comments
MattB
Alteryx Alumni (Retired)
Status changed to: Under Review

Hi @michael_renwick, we love the idea! Since our Gallery runs entirely on the restful API, we are discussing how we can further enable customers to use our API in a supported, stable manner. I will be sure to note this request and include it in our roadmap discussions. Please continue to share your feedback!

cam_w
11 - Bolide

@TylerNg

 

Looks like the status was 'under review' at one point and now is 'new idea' again.

jweston
5 - Atom

+1 Definitely need this.

Pamela
6 - Meteoroid

+1 we need this feature too

ToddNT
7 - Meteor

Is there any update on this?

We are also facing the same issue currently, we can't wait to have a workaround or a solution to this issue. 

Anuj
8 - Asteroid

is this resolved.. we have a windows service account running the alteryx service and a different windows service account which has different access levels compared to the one running the Alteryx Service 

 

It will be a bad practice to give one account all the access in a multi tenant enterprise enviornment 

KylieF
Alteryx Community Team
Alteryx Community Team
Status changed to: Under Review

Updating this idea's status back to Under Review, to be in line with past product updates.

michael_renwick
6 - Meteoroid

Bumping this again for us - still and issue, and still doesn't really have a satisfactory solution - we either have to use the undocumented gallery API, or use the official API with inappropriate privileges.

TanyaS
Alteryx Alumni (Retired)

@michael_renwickAppreciate you calling attention to this. This is already under consideration with a number of other things for endpoint expansion and improvement. It's an ongoing effort, though, as we are making adjustments to public endpoints as we touch on similar places within the product.