Hi,
is it neccesary to allow API access for the title entity or is it allowed by default, so I only have to whitelist API endpoints, that title player accounts use? I don't know whether this statement is still valid, that title entities always have access to all APIs.
According to Available Built-In Entity Types - PlayFab | Microsoft Learn, the title entity refers to all global information for that title. Since the title entity represents the title itself, so it has full API access by default. The post you mentioned is talking about denying client APIs, if you use the same statement, all client APIs would be denied. But it has nothing to do with title entity, since client API doesn’t require an Entity Token. Also, the title entity can only be used by the developers, usually there is no needs to restrict it.
30 People are following this question.
