# BackOffice Service
* Behind limited RBAC
* Use SDK for calling the services
* Call `CreateEcosystem()` with parameters that we define as part of the onboarding flow
* Azure Lambda Function to expose this on a RESTful API
* Use password for Zapier access
* Do we want to have custom invocation for scripted automation in a published manner
* We don't want "pet functions" that require additional maintenance
* But does it make more sense for us to just expose a separate SPA that takes webhook calls?
* Lambda function is an HTTP POST call to execute the trinsic cli
* Would it be okay to store authtoken in zapier, call endpoint with token in header?
* It is a temporary solution, and something of an experiment on whether we want to support Azure Functions as a category.