Purpose
How people and systems securely access Exterview, and how test and production stay separated.Access model
User login
Your team signs in using your company’s existing Microsoft account, so there’s no separate password to manage.
API authentication
System-to-system access is a documented requirement, not a shipped capability
yet, see Authentication & Scopes for what’s required before it publishes.
Role-based access
Permissions are scoped by role, configure, run, and review are separate.
Environment separation
Test and production are isolated from each other.
Environments
FAQs
How do developers authenticate to the API?
How do developers authenticate to the API?
Not yet. Automated, system-level API sign-in is a documented requirement, not a shipped capability. See Authentication & Scopes for what’s required before it publishes.
Can we test without affecting live data?
Can we test without affecting live data?
Yes. Sandbox is fully isolated from production.
Who controls access?
Who controls access?
Your administrators, through role-based access configured in Governance.
Related
API Authentication
The requirements that must land before API-key/OAuth access publishes.
Governance
Configure users, roles, and access.

