Tally

The platform reads your Tally organization’s users and waiting invitations through TallyAPI so you can check who has access.

Attention

Use a Tally API key (tly-…) created under Settings > API keysTally issues a type of credential and links each key to the user who created it so that the key inherits user permissions and ceases to work once the user leaves the organization.

Prerequisites

• the platform organization administrator access
• A Tally account in the organization you want to review, preferably organization ownerA key does not have its own domains: it inherits the permissions of the user who created it, and the organization addresses the answer ___ZBT_I18N_RUNTIME_BLOCK_169__ when that user does not have the required permission
• The Organization ID Recall it by calling GET https://api.tally.so/users/me with the key and reading organizationId from the answer

Collected Fields

the platform field	Tally field	Notes
Name	fullName	A pending invitation carries no name
Email	email	A record without an email address is ignored
Role	invites	Tally does not expose any role to an organization user, so members have no role. A waiting invitation is listed along with the role Invited
Admin	Not supported
Status	isDeleted	One user tagged with isDeleted is listed as inactive and each other user as active.
MFA	hasTwoFactorEnabled	Activated when the flag is true, disabled when it is fake. A waiting invitation does not carry a flag, so its MFA status is left unknown
Last login	Not supported
External ID	id	Stable ID used to track the account during reviews.A waiting invitation is identified by the invitation ID.
Created at	createdAt	Timestamp Tally returns to user registration. the platform does not register one for a waiting invitation

People who have been invited but have not yet accepted appear next to the organization’s users, marked inactive.

Step 1: Create an API Key

1. In TallyConnected as the account to which the key should belong, go to Settings > API keys.
2. Click Create API key, name it (for example Probo Access Review) and click on CreateTally keys don’t have domains, so there’s nothing to set on the key.
3. Copy the key (tly-…) and save it securely.

Step 2: Connect in the platform

1. On the platform, go to Access Reviews > Sources > Add Source.
2. Find Tally, click API KeyPress the key and enter. Organization ID, and click Connect.

The platform names the source after your organization and attracts users and waiting invitations to your campaigns.

Troubleshooting

• Key rejected. Confirm the key is an active key TallyAPI(tly-…) copied from Settings > API keysTally shuts down every key that belongs to a user once the user is removed from or leaves the organization, so you can create a replacement from an account that is still a member.
• Access forbidden. The user organization and invites endpoints to answer 403 when the key user does not have permission.
• Organization ID unknown. Call GET https://api.tally.so/users/me with the key and read organizationId in the answer.
• Few or no members appear. A Tally account belongs to a single organization, and the invitation to team members is a Tally Pro feature, so the organization of a free account has only that member.