Authorization header with every request:
Required roles
Most endpoints only require an authenticated caller. Analytics is restricted further:
Requests to restricted endpoints made by users without the required role will receive a
403 Forbidden response.