Registrant API access permissions