Fellow’s Super Admin API lets designated Enterprise‑plan administrators retrieve, export, and delete data across the entire workspace, making it simple to back up notes and transcripts for legal purposes and to erase third‑party data in line with privacy regulations.

To learn more about the Super Admin role, reach out to your Fellow CSM or send an email to [email protected].

Using the Super Admin API

All endpoints documented are available with the Super Admin API key and will override privacy controls, allowing access to all data in the workspace.

In addition to retrieving all data, the following two endpoints are available to Super Admins only:

DELETE /api/v1/note/{note_id}
Authorization: ApiKey {YOUR_PRIVILEGED_API_KEY}

DELETE /api/v1/recording/{recording_id}
Authorization: ApiKey {YOUR_PRIVILEGED_API_KEY}

❗️

Delete operations are permanent

Deleting a Note deletes all associated Recordings. Deleting a Recording does not delete the associated Note.

Delete operations are permanent, the objects can not be recovered.

User Impersonation

Super Admin API keys can make requests on behalf of any user in the workspace using the X-On-Behalf-Of header. This allows you to:

• Build admin dashboards that display data from a specific user's perspective
• Debug user-specific issues

When you include the X-On-Behalf-Of header, the API behaves as if the specified user made the request. All data access is scoped to what that user can see.

Using the X-On-Behalf-Of Header

You can identify the target user by either their email address or their user ID.

By Email

POST /api/v1/notes
X-API-KEY: {YOUR_SUPERADMIN_API_KEY}
X-On-Behalf-Of: [email protected]

By User ID

POST /api/v1/notes
X-API-KEY: {YOUR_SUPERADMIN_API_KEY}
X-On-Behalf-Of: USER_ID

⚠️

Important considerations

• Super admin key required — Only Super Admin API keys can use the X-On-Behalf-Of header. Regular API keys will receive an error.
• Scoped permissions — When impersonating, the request only returns data the target user can access.
• Audit logged — All impersonation requests are logged for compliance, including who made the request and who was impersonated.
• Same workspace only — You can only impersonate users within your workspace.

Error Responses