---
title: dbt Labs API Integration on Truto
slug: dbtlabs
category: Default
canonical: "https://truto.one/integrations/detail/dbtlabs/"
---

# dbt Labs API Integration on Truto



**Category:** Default  
**Status:** Generally available

## Unified APIs

### Unified User Directory API

- **Roles** — The Role object represents a role of a User.
- **Users** — The User object represents a User.
- **Workspaces** — Workspaces represent concepts like teams, workspaces, projects in apps that support them

## How it works

1. **Link your customer's dbt Labs account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app.
2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request.
3. **Call Truto's API to reach dbt Labs.** The Proxy API is a 1-to-1 mapping of the dbt Labs API.
4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field.

## Use cases

- **Sync dbt Cloud users and roles for access governance** — Security and compliance SaaS products can pull dbt Cloud user lists, roles, and workspace assignments to audit access policies, enforce least-privilege principles, and automate offboarding across their customers' data infrastructure.
- **Map dbt Cloud workspaces to your multi-tenant permission model** — SaaS platforms that manage cross-tool permissions can sync dbt Cloud accounts and projects as workspaces, giving end users a unified view of who has access to which data transformation environments alongside other tools in their stack.
- **Automate SOC2 and compliance reporting across data tools** — Compliance-focused SaaS companies can continuously sync dbt Cloud user directories to detect orphaned accounts, verify role assignments, and generate audit-ready reports — without asking customers to manually export user lists.
- **Enrich your user directory with dbt Cloud identity data** — Identity and IT management platforms can ingest dbt Cloud users, roles, and workspace memberships alongside other SaaS tools, giving IT teams a single pane of glass for managing their analytics engineering team's access.

## What you can build

- **Unified user directory with dbt Cloud roles** — Display dbt Cloud users alongside users from other integrated tools, normalized into a consistent schema with roles and workspace assignments.
- **Cross-platform access audit dashboard** — Show which users have Developer, Read-Only, or IT Admin licenses in dbt Cloud and flag discrepancies against your customers' HR systems or identity providers.
- **Automated offboarding alerts for dbt Cloud** — Detect when a user has been deactivated in an identity provider but still has an active dbt Cloud account, and surface an actionable alert to the end user.
- **Workspace-level permission mapping** — Sync dbt Cloud accounts and projects as normalized workspaces so customers can define and enforce granular data access policies across their entire analytics stack.
- **License utilization reporting** — Aggregate dbt Cloud user and role data to help customers understand license consumption and identify unused or over-provisioned seats.

## FAQs

### What authentication method does the dbt Cloud integration use?

dbt Cloud supports token-based authentication using Service Account Tokens or User API Tokens. Truto handles token storage and injection so your end users can connect their dbt Cloud accounts securely without your team managing credentials.

### What data can I access through the Unified User Directory API for dbt Cloud?

The Unified User Directory API maps dbt Cloud data into three normalized resources: Users (individual dbt Cloud users), Roles (license types and permission levels like Developer, Read-Only, IT Admin), and Workspaces (dbt Cloud accounts and projects).

### Are dbt Cloud-specific tools available out of the box?

dbt Labs tools beyond the Unified User Directory API are built on request. If you need access to job management, artifact fetching, or Semantic Layer queries, Truto can build and ship those endpoints for your use case.

### How does Truto handle pagination and rate limits for the dbt Cloud API?

Truto manages pagination and rate limit handling automatically. The dbt Cloud API enforces rate limits on a per-token basis, and Truto respects these limits with built-in retry and backoff logic so your integration doesn't get throttled.

### Can I use this integration for write operations like creating or deactivating dbt Cloud users?

The current Unified User Directory API focuses on read operations — syncing users, roles, and workspaces. Write capabilities depend on what the dbt Cloud Admin API supports and can be scoped as a custom build request through Truto.

### How fresh is the user and workspace data from dbt Cloud?

Data freshness depends on your sync frequency. Truto supports both on-demand API calls for real-time reads and scheduled syncs for periodic snapshots, so you can balance freshness against API usage based on your product's needs.