Skip to main content
For LearnHub endpoints, tenant API keys are checked against LearnHub permissions. Service-provider API keys are checked against service-provider status and content ownership.

​
Tenant Permissions

Common permission patterns: The API applies resource-specific permissions for categories, sections, lessons, assessments, assignments, quizzes, and uploads.

​
Service-Provider Behavior

Service-provider keys use the same routes for supported resources, but the backend resolves them against service-provider-owned admin training content. Some resources are intentionally tenant-only.
Assessments and assignments are tenant-only. Use tenant API keys for those endpoints.

​
Permission Failures

Permission failures return 403 with the standard error envelope. The message may indicate a missing permission, disabled LearnHub service, inactive service provider, or unsupported operation for the key mode.