remote_archive_config row regardless of tier — system, reseller and domain.service-type can be system or reseller, and those rows have no domain to live under; the domain-scoped path at /domains/{domain}/recording-storage cannot address them. Use that path for a single tenant.service-password, access-token and refresh-token are omitted from the response — not masked — and a *-redacted: yes flag says which of them are configured. Omitting rather than masking means nothing can be echoed back over the real credential on a read-modify-write.include-secrets=yes returns them in the clear and requires the Super User scope specifically — a read-only Super User is refused, and every disclosure is logged.Super User or Super User Read Only scope.Authorization: Bearer ********************curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/recordings/storage?service-type=undefined&service-vendor=undefined&enabled=undefined&include-secrets=undefined&limit=undefined&start=undefined&sort=undefined' \
--header 'Authorization: Bearer <token>'[
{
"service-id": "string",
"service-name": "string",
"service-type": "system",
"service-value": "string",
"service-vendor": "string",
"service-url": "string",
"service-path": "string",
"service-login": "string",
"service-password": "string",
"service-password-redacted": "yes",
"admin-email": "string",
"access-token": "string",
"access-token-redacted": "yes",
"refresh-token": "string",
"refresh-token-redacted": "yes",
"enabled": "yes",
"status": "string",
"parameter": "string",
"created-datetime": "string",
"updated-datetime": "string",
"emailed-datetime": "string"
}
]