I had the same question and reached out to the app developer through my Cisco SE.
When you configure an input in the app, it needs to do a POST to the AMP API to configure the AMQPS event stream.
Once you've configured your inputs and they're all posted to your AMP instance, you can switch the app to a read-only credential and it continues to work.
Tested this myself and it so far it's been working as described. If I need to modify an input I temporarily swap in a RW API credential and go back to RO after the modification is made.
... View more