Lutril reads and manages your Gravitee APIM organization users (the operators who administer the platform) via its Management REST API. It authenticates with a personal access token minted for an organization service account, sent as a Bearer token.
Organization service account with the ORGANIZATION ADMIN role (grants read on organization users to list them)
The ADMIN role also covers creating and removing organization users from Lutril
Setup steps
Sign in to the Gravitee APIM Console as an administrator. Open Organization settings, then under User Management click Users, click Add user, and choose the Service Account type. Give it a service name.
Open that service account and assign it the ADMIN role on the Organization so it can read and manage organization users. User management guide
On the service account page, scroll to the Tokens section, click Generate a personal token, name it, and generate it. Copy the token immediately: it is shown only once and cannot be retrieved later.
In Lutril, connect Gravitee APIM. Set the Management API URL to your APIM management base up to (but not including) /management (for example https://apim.example.com). A quick way to find it: open your APIM console constants.json and copy the baseURL value, dropping the trailing /management. Paste the token into Personal Access Token, and set the Organization ID if it is not DEFAULT.