# Public API Keys[¶](https://doc.dataiku.com/dss/latest/governance/publicapi/keys.html#public-api-keys "Permalink to this headline")

All calls to the Dataiku Govern public API, either performed using The REST API or API for Dataiku Govern must be authenticated using API keys.

There are only a single kind of API keys for the Dataiku Govern REST API:

* Global API keys

## Global API keys[¶](https://doc.dataiku.com/dss/latest/governance/publicapi/keys.html#global-api-keys "Permalink to this headline")

Global API keys are keys that are defined for the whole Dataiku Govern instance. Global API keys can only be created and modified by DSS administrators.

Global API keys are not equivalent to a DSS user. Global API keys have their own access rights, and calls performed will appear as having been performed by this key.

Global API keys are defined in Administration > Security > Global API Keys

### Global admin[¶](https://doc.dataiku.com/dss/latest/governance/publicapi/keys.html#global-admin "Permalink to this headline")

This special permission gives global admin rights to this key. A global admin key has all permissions in the Dataiku Govern instance. It can also perform global DSS administration tasks:

* Manage users

* Manage log files

* Access the Blueprint Designer

* Access the Role and Permissions Editor

* Access the Custom Page Editor
