Configure Skyhigh CASB for Airtable

Prerequisites  

1. To enable Skyhigh CASB for Airtable, contact Skyhigh Security Support.  
2. API access should be enabled with an Airtable account admin user.
3. Personal Access Token. You can create a Personal Access Token (PAT) based on your Airtable account. Follow these steps to create a PAT token:
   • If your Airtable account is on the production environment (airtable.com), go to https://airtable.com/create/tokens/. If your Airtable account is on the staging environment (staging.airtable.com), go to https://staging.airtable.com/create/tokens/.
   • On the Personal access tokens page, click Create token.
   • Name. Enter a name for your PAT.
   • Scopes. Assign the following permissions to your PAT:
     • data.records:read
     • data.records:write
     • data.recordComments:read
     • data.recordComments:write
     • data.records:manage
     • enterprise.user:read
     • enterprise.auditLogs:read
   • Access. Select the bases and workspaces in Airtable that Skyhigh CASB can access.
     • All current and future bases in this workspace.
   • Click Create token.
     
   • Copy the PAT token and click Done.
     
     This newly created PAT token is used to enable API access for Airtable in Skyhigh CASB.
4. Enable Change Event Logging. You must enable change event logging in Airtable so that Skyhigh CASB can receive Airtable events. Follow these steps to enable change event logging:
   • In the Airtable admin console, select the Settings tab from the Admin Panel.
   • On the Settings page, under Security and Authentication, toggle Enable Change Events ON so that Skyhigh CASB receives Airtable events.
     

Enable API Access

To configure Skyhigh CASB for Airtable:

1. Log in to Skyhigh CASB. 
2. Go to Settings > Service Management. 
3. Click Add Service Instance.
4. Select Airtable, add a unique name for the instance and click Done.
    
5. Select the newly added Airtable instance from the Services list.
6. Click Enable on the setup page for the Airtable instance.
   
7. Click Provide API Credentials.
   
8. Enter the API credentials:  
   • Enterprise Account Id. The Enterprise Account ID for your Airtable admin account.
   • Personal Access Token. The PAT token created by your Airtable admin account.
   • Api domain. For Airtable users in the production environment (airtable.com), enter api.airtable.com and for Airtable users in the staging environment (staging.airtable.com), enter api-staging.airtable.com.
     
9. Click Submit.
   
10. The Overview and Setup tabs for the Airtable instance display the status as enabled. Once authenticated, Airtable events are received by Skyhigh CASB.