Before you start
- You need the Account Holder or Admin role in App Store Connect. Only those roles can create a team key.
- It takes about five minutes. Apple lets you download the key file only once, so keep it somewhere safe until it is connected.
- You must be the owner of the AsoBeast workspace, and the Store connections section of Integrations must show a Connect App Store Connect button. If it says that store connections are off, the instance needs
STORE_CONNECT_ENCRYPTION_KEYfirst, see the overview. - The first numbers appear one or two days after you connect, because Apple prepares the first report after AsoBeast asks for it.
Choose the key role
A team key carries its own role, separate from the role of the person who creates it.
Choose Admin. Apple lets only an Admin key ask for the reports, so this one key does everything AsoBeast offers.
For least privilege, connect the Admin key first, let the first sync ask Apple for the reports, then replace it with a Sales and Reports key. An App Store app imported after the switch needs the Admin key again, because its reports have not been asked for yet, and a Sales and Reports key cannot post replies.
Create the key
1
Open App Store Connect
Sign in at appstoreconnect.apple.com with an Account Holder or Admin account.
2
Open the team keys
Press Users and Access, open the Integrations tab, choose App Store Connect API in the list on the left, then Team Keys.
3
Request access, the first time only
If the page shows Request Access, the Account Holder presses it and accepts the terms. Apple turns the API on for the team at once, and the page then shows the team keys.
4
Generate the key
Press the + button above the list, or Generate API Key when the list is empty. Name the key, for example AsoBeast, choose Admin under Access and press Generate. The key appears in the list.
5
Copy the issuer ID and the key ID
The Issuer ID is shown above the list, a long value such as
57246542-96fe-1a63-e053-0824d011072a. The Key ID is the ten letters and digits in the key’s row. Copy both.6
Download the key file
Press Download in the key’s row. Apple downloads
AuthKey_ followed by the key ID and .p8, and never offers the file again. If it is lost, revoke the key and generate a new one.Connect it in AsoBeast
1
Open Store connections
In AsoBeast, open Integrations in the sidebar. The App Store Connect card is the first one under Store connections.
2
Open the dialog
Press Connect App Store Connect.
3
Paste the two IDs
Paste the issuer ID into Issuer ID and the key ID into Key ID.
4
Add the key file
Choose the
.p8 file under Private key, or open it in a text editor and paste all of it, including the BEGIN PRIVATE KEY and END PRIVATE KEY lines.5
Connect
Press Connect App Store Connect. AsoBeast asks Apple whether the key works before it stores anything, so a mistyped ID or a revoked key is refused in the dialog. When Apple accepts it, the dialog closes with App Store Connect connected and the card shows the connection.
After connecting
The card lists the issuer ID, the key ID, the key’s fingerprint and the day it was connected, then:- Review replies reads Not tried yet until the first post, then Allowed, or names the role to add when Apple refused one.
- The status line reads Waiting for Apple’s first report, usually within two days of connecting. until the first files arrive, then Last synced and the time.
- Apps this key reports lists every App Store app of the workspace with its state and the days of data stored.
AsoBeast downloads new files every day at 05:30 UTC. What the numbers mean is in Read impressions and conversion from your console. To import an app’s private keyword field through this key, see When App Store Connect imports the field.