diff --git a/server/middlewares/integration/verifyAccessTokenAccess.ts b/server/middlewares/integration/verifyAccessTokenAccess.ts index 93d986c0a..9908cf071 100644 --- a/server/middlewares/integration/verifyAccessTokenAccess.ts +++ b/server/middlewares/integration/verifyAccessTokenAccess.ts @@ -68,6 +68,11 @@ export async function verifyApiKeyAccessTokenAccess( ); } + if (apiKey.isRoot) { + // Root keys can access any access token in any org + return next(); + } + if (!resource.orgId) { return next( createHttpError(