# Configure permissions for monday.com protection

To connect your monday.com account to Commvault, you must configure a credential with the required permissions and provide the authentication details Commvault needs to connect.

## Create or identify a monday.com credential

To back up and restore monday.com data, you need a Personal API Token from monday.com. You can generate a Personal API Token from the monday.com Developer Center.

1. Sign in to monday.com.

2. Click your profile icon, and then select Developers to open the Developer Center.

3. In the Developer Center, open My Access Tokens.

4. Copy the personal API token.

5. Store the token securely. You will provide it as the credential password when you configure backups in Commvault.

## Assign the required permissions

The Personal API Token must have the appropriate scopes for the operations you want to perform.

Operation | Required scope | What it grants
--- | --- | ---
Browse | me:read | Read access to user profile and account metadata
Browse | boards:read | Read access to boards, workspaces, folders, items, and updates
Backup | me:read | Read access to user profile and account metadata
Backup | boards:read | Read access to boards, workspaces, folders, items, and updates
Restore | me:write | Write access to user profile and account metadata
Restore | boards:read | Read access to boards, workspaces, folders, items, and updates
Restore | boards:write | Write access to create and update boards, items, columns, groups, and updates

## Provide connection details

When you configure backups for monday.com, you will provide the Personal API Token as the credential password. Commvault uses this token to authenticate API calls to monday.com.

The monday.com API endpoint is `api.monday.com`. Commvault uses API version 2026-4, which is pinned via the API-Version header in all API calls.

## Notes and considerations

- The Personal API Token is long-lived and does not expire. However, you can revoke the token at any time from the monday.com Developer Center.

- If you revoke or regenerate the token, you must update the credential in Commvault to continue protecting monday.com data.

- Use a dedicated service account or admin account to generate the token, rather than a personal user account, to avoid token invalidation when the user leaves the organization.

## Validate permissions

After you configure the credential, run a test backup to confirm that the token has the required permissions.

If the backup fails with an authentication error, check the following:

- The token is correctly copied into the Commvault credential field without extra spaces or characters.

- The token has not been revoked in the monday.com Developer Center.

- The account associated with the token has access to the workspaces and boards you want to back up.

- The account plan supports API access. Free plans may have limited API access.

×

Loading...