Security · Service account

Connect Gravitee AM to Lutril

Lutril reads and manages your Gravitee AM organization users (the operators who administer AM) via its Management REST API. It authenticates with an account access token minted for an organization user, sent as a Bearer token.

Required scope / permission

  • Organization user with permission to read organization users (to list them)
  • Add write and delete permission on organization users to create and remove them from Lutril

Setup steps

  1. Sign in to your Gravitee AM Console as an administrator. For automation, first create a dedicated service account: in the navigation menu click Organization, then under User Management click Users, and add a user to act as the integration identity. Give it a role with organization user permissions.
  2. Open that user (Organization, then Users, then click the username) and scroll to the Tokens section. Click Generate a personal token, name it, and generate it. Users guide
  3. Copy the token immediately: Gravitee AM shows it only once and it cannot be retrieved later.
  4. In Lutril, connect Gravitee AM. Set the Management API URL to your AM management base up to (but not including) /management, including any context path (for example https://am.example.com/am). A quick way to find it: open your AM console at /am/ui/constants.json and copy the baseURL value, dropping the trailing /management. Paste the token into Account Access Token, and set the Organization ID if it is not DEFAULT.