API User Role for Transaction Initiation Only (No Approval) - Finance Ops Workspace

Support
,
1

Hi Fireblocks Support,

I want to set up an API user on our Finance Ops workspace. (my user id : bulapu@ripple.com)
The API user will be called from an external automation tool (Tines) and should only be able to submit/initiate transactions, it should NOT have the ability to approve or sign transactions, as approval will be handled manually by our team through the Fireblocks console.
I want to confirm below things:

  1. Is there a role that allows an API user to initiate/submit transactions via API
    but cannot approve or sign them?

  2. Looking at the available roles, it appears the closest option may be the ‘Signer’
    role, can you confirm if this is correct, or if there is a more appropriate role
    for this use case?

  3. We also want to confirm that IP whitelisting is available for API users in our
    workspace, we have specific static IPs we want to restrict the API user to.

Any guidance on this would be helpful.

Thank you
Bhavya Ulapu
Ripple

2

Hi Bhavya,
The appropriate role would be “Editor”. Please see:
https://support.fireblocks.io/hc/en-us/articles/5254222799900-Best-practices-for-choosing-user-roles

You may find instructions for whitelisting addresses for API users here:
https://support.fireblocks.io/hc/en-us/articles/4405980040210-Allowlist-IP-addresses-for-API-user-requests

3

Hi Andres,Thank you! Really helpful to have that confirmed, will go ahead with the Editor role for the API user.