I'm currently integrating DocuSign with our application using the OAuth flow for the purpose of conducting access reviews. During this process, I've encountered a challenge in identifying the actual owner of a DocuSign account.
Our integration allows for user management, including deletion. However, we want to implement a safeguard to prevent the accidental deletion of the account owner. The API documentation and current endpoints don't seem to provide a clear method for distinguishing the account owner from other administrative users.
Is there an API endpoint or a recommended approach to reliably identify the original owner or primary administrator of a DocuSign account? This information is crucial for implementing proper access controls and ensuring the integrity of the account structure.
Specifically, I'm looking for:
1. An API method to retrieve the account owner's details
2. Any flags or identifiers in the user data that might indicate account ownership
3. Best practices for handling this scenario in DocuSign integrations
Any insights or official recommendations would be greatly appreciated. Thank you for your assistance.