Hi Henri - have you considered for your use case to leverage the user-defined APIs?  This is the recommended way to share data with other parties, and to carefully control what they can get and do.

In short: you go to the automation module, you write a script that implements the functionality, and you publish that as a new API on your DataMiner System.  You can assign a token, and you can then give that dedicated URL, with that dedicated functionality that you want to give them, along with a dedicated token to be able to use it.

Advantage is that you do not have to create a user for those people in your DataMiner System, you will give them a API that does what they need but also nothing more than that, you can tailor the API to their exact needs (no need to explain how the full standard API of DataMiner works) and therefore it will be very easy for them to use it, you are in full control and you can switch on that specific API as you wish.

It has a lot of benefits, and as far as I can tell, a very good fit for your use case.  Here are two samples of user-defined APIs:  User-defined APIs tutorials | DataMiner Docs

One sample just returns Hello World, the other sample returns a list of elements that have alarms, along with their alarm level.  But again, you can make it whatever you want, and you can tailor it to the exact needs of the user so that you do not need to spend time explaining which API calls to use on the generic API, and explain potentially how certain things need to be processed to get what they need.

Hope this helps.