When connecting DocuSign administrators may notice Vanta requires permission to create and send envelopes. It is understandable that administrators find these permissions pretty excessive.
However we require these in order to list users. This is because in order to list users, we call the following API:
https://developers.docusign.com/docs/esign-rest-api/reference/users/users/list/
And this API is only accessible with the eSignature API scope. We're aware that some customers may use DocuSign organizations.
We also request organization_read scope and call the following API for such customers:
https://developers.docusign.com/docs/admin-api/reference/usermanagement/users/getusers/
This combination lets us get the complete user list for the organization. Vanta does not make any other API calls to your DocuSign account.
<%= heading %>