If user could have a direct link that opens this window with all of these variables pre-filled in through the query string params. Currently, the create promotion API is too limiting to use as it's POST only and trying to initiate this call externally will not preserve the permissions of the user trying to create a promotion.