Connected apps
The applications that have been allowed to use Foudra on someone's behalf. Everyone sees the ones they allowed; admins and owners see everyone's, so a company can see what has access to it.
Can is what the application may do, and never more than the person who allowed it: Read; Read and change; or Read, change and approve (purchase orders). Last used is when it last called the API.
Disconnect stops it at once: its next request is refused, and it would have to ask again. Removing someone from the company has the same effect on everything they connected.
Applications connected this way don't need an API key. Keys are still the way for your own scripts.