Limit API Clients to a Single Organization

In the 3.6 release, Account Manager began identifying shared API clients with indicators and warnings. Now, Account Manager enforces single-organization assignment for new API clients. For existing API clients, Account Manager prevents account administrators from adding more organizations. If you have existing API clients assigned to multiple organizations, consider migrating them to single-organization assignments. This practice improves security by reducing the risk of unintended cross-organization access.

Where: This change applies to Account Manager for B2C Commerce.