Company and tenant
In the user interface, administrators select companies and organizational areas. In the API, the corresponding technical boundary is represented as a tenant ID. Do not assume a company name is a stable technical identifier. Persist the tenant ID used by the API.Two independent authorization layers
A portal user may be permitted to create keys, while each key still has its own limited API scope.Tenant and division
- A tenant owns its division hierarchy.
- A division can have a parent division or be a root division.
- An employee can have a tenant and an optional division assignment.
- A division ID cannot be used to grant access outside the key’s scope.
- Public employee updates cannot transfer an assigned employee to another tenant.
Attempt, request, and retry
A logical operation may contain multiple HTTP attempts. Generate a newX-Request-ID for each attempt and link the attempts in your own logs. Reusing an ID does not make the operation idempotent.