Close

API token controls in Atlassian Access

Cloud keychain with keys

What are API token controls?


API tokens allow a user to authenticate with cloud apps and bypass two-step verification and SSO, and retrieve data from the instance through REST APIs. Token controls allow admins to view and revoke the use of API tokens by their managed accounts.

Why use API token controls?


Admins can achieve better visibility into usage of bot accounts and integrations, and improve security and admin controls over API access.

Hogyan működik?


Admins can view and manage API tokens that users in their organization have created by navigating to each user’s account details page under Managed accounts. To learn more about how users create and use their own API tokens, see API tokens.

Control whether users can authenticate with a user API token
Control whether users can authenticate with a user API token
View all active user API tokens for managed accounts
View all active user API tokens for managed accounts

For external users, admins can control whether they can create new API tokens or use existing tokens by navigating to External users under security.

Allow or block external users from accessing API tokens
Allow or block external users from accessing API tokens

Read our documentation on user API token controls here