Geovane
04/27/2026, 11:43 AMtsadmin. Is it fine to use this one, or should I do something else?Answer Overflow
04/27/2026, 11:43 AMspotter-code
04/27/2026, 11:43 AMupdateUserGroup, the caller must have:
- ADMINISTRATION privilege
- If RBAC is enabled: GROUP_ADMINISTRATION privilege
So tsadmin is fine only if that user has those privileges in your environment.
Best practice is to avoid using a personal/human admin account for integrations and instead create a dedicated service account (API user) with least privilege required (here: group admin capabilities), then use that account’s credentials/token for automation.
If your current tsadmin is a shared platform admin user, it can work short-term, but long-term you should move to a service account for auditability and safer credential rotation.Swarnika
04/27/2026, 4:09 PMGeovane
05/01/2026, 2:23 PM