Zendu Connect API service accounts see every group in their database

An API service account on Zendu Connect does not have a groups concept the way a regular user login does.

• An API service account gets access to every group in its assigned database.

• There is no way to restrict an API service account to a subset of groups within that database. Access is all-or-nothing at the database level.

• This is different from a regular user login, where group-based access restrictions apply.

What this means in practice: if an integration or external system should see only part of a fleet, you cannot achieve that by limiting the API account to specific groups. The API account will be able to reach every group in its database.