---
title: "Authorization"
slug: "authorization"
updated: 2025-09-17T09:44:43Z
published: 2025-09-17T09:44:43Z
canonical: "docs.grassfish.com/authorization"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.grassfish.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authorization

Some API requests require authorization. There are two ways to authorize yourself: the session ID and the API key.

## Session ID

When you're logged into IXM One, you get a session ID. With the API, you can use this session ID to log in as your IXM One user.

The session ID is always connected to a user. When you use it, you have the same rights and permissions that the user has in IXM One. For example, if the user is not an admin, you can’t query the rights of other users.

#### Get your session ID

To get your session ID, perform the following steps:

1. Access the [IXM One API](https://docs.grassfish.com/grassfish-api).
2. Go to **Users > Log a user into the system**.
3. In the body, enter your IXM One application name, username, and password.
4. Optionally, enter your Application GUID. If you don’t have one, just leave it as is.
5. Check the response to retrieve your session ID.

> [!NOTE]
> Note
> 
> For security reasons, the session ID expires after a certain period of time.

## API key

You can create an API key to perform tests with your personal IXM One user. When you use the key for authorization, you have the same rights and permissions that this user has.

#### Get your API key

To get your API key, perform the following steps:

1. Log into IXM One as an administrator.
2. Go to **Administration > Permissions**.
3. In the **User management** pane, double-click on the user that you want to use with the API.
4. In the **Edit user** window, switch to the **API Key** tab.
5. Copy the available API key or create a new one to copy.

API means application programming interface. An API consist of multiple definitions and protocols for developing and integrating application software. An API is an interface that allows independent applications to communicate with each other and exchange data.

Authorization is the process of verifying whether a user is allowed to perform a certain action.

A standalone application can be identified by a globally unique identifier (GUID). If you are unsure, ask your administrator whether your application requires an application GUID upon login.