# Gravitee APIM + Lutril: setup guide

> Lutril reads and manages your Gravitee APIM organization users (the operators who administer the platform) via its Management REST API. It authenticates with a personal access token minted for an organization service account, sent as a Bearer token.

Source: https://www.lutril.com/integrations/graviteeapim
Category: Security
Auth: service_account
Last verified: 2026-07-15

---

## Setup

1. Sign in to the Gravitee APIM Console as an administrator. Open Organization settings, then under User Management click Users, click Add user, and choose the Service Account type. Give it a service name.
2. [object Object]
3. On the service account page, scroll to the Tokens section, click Generate a personal token, name it, and generate it. Copy the token immediately: it is shown only once and cannot be retrieved later.
4. In Lutril, connect Gravitee APIM. Set the Management API URL to your APIM management base up to (but not including) /management (for example https://apim.example.com). A quick way to find it: open your APIM console constants.json and copy the baseURL value, dropping the trailing /management. Paste the token into Personal Access Token, and set the Organization ID if it is not DEFAULT.

## Access requested

- Organization service account with the ORGANIZATION ADMIN role (grants read on organization users to list them)
- The ADMIN role also covers creating and removing organization users from Lutril

## References

- [Gravitee APIM documentation](https://documentation.gravitee.io/apim/configure-and-manage-the-platform/manage-organizations-and-environments/user-management)
- [Management API reference](https://documentation.gravitee.io/apim/management-api-reference)
- [Define an APIM service account](https://documentation.gravitee.io/apim/terraform/define-an-apim-service-account-for-terraform)