System for enforcing least privileged API access with dynamically scoped identification and access tokens

A system comprising:

• a processor;
• a data bus coupled to the processor;
• and,
• a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
• establishing a secure connection between a data center asset contained within a data center and connectivity management system of a data center monitoring and management console, the data center monitoring and management console includes an application programming interface (API) access management system, the API access management system performing an API access management operation, the API access management operation managing authorized access to a particular API;
• generating a request for a client identifier or an access token for access to a target API by a user, the target API being associated with the data center asset;
• providing the request for the client identifier or the access token to the API access management system;
• obtaining an access policy associated with the target API, the access policy identifying access permissions associated with the user;
• determining a least privileged API access permission based upon the access policy associated with the target API;
• and,
• using the client identifier or access token to access the target API when the least privileged API access permission allows access to the target API.

A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

• establishing a secure connection between a data center asset contained within a data center and connectivity management system of a data center monitoring and management console, the data center monitoring and management console includes an application programming interface (API) access management system, the API access management system performing an API access management operation, the API access management operation managing authorized access to a particular API;
• generating a request for a client identifier or an access token for access to a target API by a user, the target API being associated with the data center asset;
• providing the request for the client identifier or the access token to the API access management system;
• obtaining an access policy associated with the target API, the access policy identifying access permissions associated with the user;
• determining a least privileged API access permission based upon the access policy associated with the target API;
• and,
• using the client identifier or access token to access the target API when the least privileged API access permission allows access to the target API.