Skip to main content

​
Required Permissions

The user authorizing the Snyk connection must have appropriate permissions to access projects and vulnerability data.

​
User Authorization Flow

Unlike admin consent flows, Snyk uses standard user-level OAuth. The user authorizes Leen’s Snyk app to access Snyk resources based on their individual permissions within the organization.
Important: Permissions are scoped based on the user’s role in the Snyk organization. The authorizing user can only grant access to resources they can view.

​
Snyk Organization Roles

Organization Admin (Recommended)
  • Can add and delete projects
  • Can view all projects, vulnerabilities, and reports
  • Can manage organization settings and integrations
  • Can override Snyk checks and manage users
  • Full access to all organization resources
  • Best choice for comprehensive data access across the organization
Organization Collaborator
  • Can view and test projects
  • Can view project history and reports
  • Can create pull requests and manage ignores
  • Limitation: Cannot add/remove projects or manage users
  • May have sufficient permissions depending on data requirements
Group Admin (if using Snyk Groups)
  • Has full permissions at both Group and Organization levels
  • Automatically acts as Organization Admin for all organizations in the Group
  • Can manage multiple organizations within a group
  • Useful if you need to pull data from multiple Snyk organizations
Group Viewer
  • Read-only access at Group level
  • Limited Organization permissions
  • Primarily for monitoring purposes

​
Key Points

  • No admin consent required - this is individual user authorization
  • The user authorizes access to Snyk resources they have access to
  • Permissions are scoped based on the user’s role in the Snyk organization
  • Both Organization Admin and Organization Collaborator can view projects, but Admin has broader access
Recommendation: Use an Organization Admin or Group Admin account for the authorization in step 2 to ensure Leen can access all projects and vulnerability data within your Snyk organization.

​
Snyk App

Leen supports Snyk integrations via OAuth2 and API Keys for both Snyk US, Snyk US-2, and Snyk EU. To integrate with Snyk, users will have to authorize Leen’s Snyk app or provide a valid API key. This will allow Leen to access the appropriate Snyk resources in your account. When using OAuth2, Leen takes care of the code-flow and access token management, so you don’t have to worry about it.
Snyk currently does not offer their V1 API in the EU region. If you are an EU customer, you may experience slight degradation in Leen’s data mappings when compared to the US. Here are all the fields that Leen will not be able to map for EU customers:
  • package_name
  • package_version
  • platform
  • publication_time
  • is_patchable
  • cvss_score
  • remediation

​
Onboarding

Follow the steps below to onboard a user to our Snyk Integration.
1

Create Snyk Connection using OAuth flow

With your Leen API Key and your Customer’s Org ID, make an API request to create a new Snyk Connection. More information can be found on the API Reference page.
The response will look like this:
2

Redirect User to Snyk

Redirect the user to the oauth2_authorize_url from the previous step in a new tab. This will prompt the user to authorize Leen’s Snyk app to access their Snyk resources.snyk-authOnce the user has authorized the app, they will be redirected to Leen on a successful authorization.snyk-auth-success
3

Pull Data

Now that the user has authorized the app, you can pull data from Snyk using the connection_id from the first step. More information can be found on the API Reference page.

​
User Creation

Snyk users can be added through your Snyk organization:
1

Snyk Web Interface

  1. Go to https://app.snyk.io (or your region-specific URL like https://app.us.snyk.io or https://app.eu.snyk.io)
  2. Navigate to your organization
  3. Click on the Members tab in the main navigation
  4. Click Add members > Invite new members
  5. Enter the user’s email address
  6. Assign a role from the dropdown
  7. Click Invite
2

Auto-Provisioning (if using SSO)

Users can be automatically provisioned when they first sign in via your identity provider (e.g., Okta, Azure AD)

​
API Key Authentication

1

Navigate to Organization Settings in Snyk

In the Snyk organization you want to connect, go to Settings and click “Manage Service Accounts”.snyk-manage-svc-account
2

Create an API Key for the Snyk Organization

Under Service Accounts, enter a name, select Org Admin as the role, and choose API Key (no expiry). Click “Create service account”.snyk-manage-svc-account
Repeat for each Snyk organization you want to include, or use a group-level service account if applicable.
3

Create Snyk Connection using API Key

With your Leen API Key and your Customer’s Org ID, make an API request to create a new Snyk Connection with the API token created in the previous step. More information can be found on the API Reference page.
The response will look like this:
4

Pull Data

Now that the connection has been created, you can pull data from Snyk using the connection_id from the previous step. More information can be found on the API Reference page.