# BackOffice Service * Behind limited RBAC * Use SDK for calling the services * Call `CreateEcosystem()` with parameters that we define as part of the onboarding flow * Azure Lambda Function to expose this on a RESTful API * Use password for Zapier access * Do we want to have custom invocation for scripted automation in a published manner * We don't want "pet functions" that require additional maintenance * But does it make more sense for us to just expose a separate SPA that takes webhook calls? * Lambda function is an HTTP POST call to execute the trinsic cli * Would it be okay to store authtoken in zapier, call endpoint with token in header? * It is a temporary solution, and something of an experiment on whether we want to support Azure Functions as a category.