Access Control

[JordanGRC]

Hello CompanyCam Community,

We are currently integrating CompanyCam with our CRM for and have successfully configured our integration to upload documents directly from CRM job records into their corresponding CompanyCam projects.

We need to ensure that all documents uploaded through our API integration are automatically assigned Restricted access rather than the default Everyone access. This is particularly important because these documents may contain customer contracts, financial information, and other sensitive records.

During our testing, we confirmed the following:

• Documents upload successfully using <span>POST /public_api/v1/projects/{project_id}/documents</span>.
• Including <span>"access_limited": true</span> in the document creation payload returns HTTP 201, but the document is still created with Everyone access.
• We identified that the CompanyCam web application uses <span>"access_limited": true</span> when changing a document's access to Restricted.
• Attempts to update document permissions through the public API returned HTTP 404, indicating that the endpoints we tested were not recognized.

Could you please clarify the following?

1. Is there a supported API method to set a document's access to Restricted when it is initially uploaded?
2. Is there an API endpoint that allows us to change an existing document's access from Everyone to Restricted?
3. Can we configure a company-wide default so that all documents uploaded through an API integration automatically inherit Restricted access?
4. If these options are supported, could you provide the appropriate API endpoints, request payloads, and authentication requirements?

Our goal is to automate document synchronization between our CRM and CompanyCam while ensuring that sensitive customer documents are never left accessible to all CompanyCam users.

We would appreciate any guidance or alternative solutions your development team can provide.