Connect BrowserStack with API Key – StackOne Hub

​

Choose whose key to use

The username and access key belong to one BrowserStack member, and StackOne acts with that member’s role.

• Use a Group Admin, BrowserStack’s name for a member whose IAM Role is Admin for the whole organization rather than for one team. BrowserStack says an Admin can modify product access for other members, invite and remove members, and change member roles.
• An Owner also works. There is one Owner per organization. The Owner adds subscription changes, which StackOne does not use, and can read the audit log without the setting below.
• Do not use a Team Admin. A Team Admin reaches only its own team’s members, so StackOne would see part of the organization. The connection test fails when the key cannot see the Owner, but it cannot tell when a Team Admin’s team includes the Owner.
• BrowserStack documents one access level for the Users and Teams APIs, Owner or Admin, and names no read-only key. The actions that create, change or remove users and teams use the same key. If auto user provisioning is on, BrowserStack sends team creation and deletion to your identity provider instead.
• Use an Admin who will stay. BrowserStack says a removed member can no longer access the organization’s information, so the connection stops working. BrowserStack also suggests resetting access keys when members leave the organization.
• The audit log read is the only action that needs more. BrowserStack lets only the Owner view audit logs by default. To let a Group Admin read them, the Owner opens Settings > Permissions, selects the IAM roles tab, selects Allow Group Admins to view Audit logs under Account Insights and Reports, and selects Save. Skip this if you do not need the audit log read.

​

Find your username and access key

The username and access key identify the BrowserStack member who owns them.

​

Rotate or replace the access key

An access key does not expire by default. If your organization turns on auto-rotation, BrowserStack replaces every user access key after the duration it sets.

• The auto-rotation choices are 30, 60, 90, 180 or 365 days. BrowserStack emails the member 14 days before a key rotates, and Key validity status under Settings > Product > Local Testing shows the next date.
• Rotating a key invalidates the old one. The connection stops working until you paste the new key into StackOne Hub.
• To rotate the key, sign in as its owner, select the User Profile icon in the top-right corner, then Account & Profile > My Profile. In Authentication & Security, select the rotate icon next to Access Key, then select Confirm. Copy the new key with the copy icon and paste it into the Access Key field in StackOne Hub.