Manage personal access tokens

Authentication tokens allow a user to enter their credentials once, then receive an alphanumeric token to use to access different services or parts of the system infrastructure.

Authentication tokens are tied to the permissions granted to the user through role-based access control (RBAC), and they provide the user with the appropriate access to application programming interfaces (APIs). You can use tokens in API endpoint requests.

You can manage authentication tokens using the Profile page.

Add a personal access token

Add a personal access token from the Profile page.

This task walks you through creating a personal access token that is required to access the Continuous Delivery API functionality. Be sure to copy the token and save it to a secure location. The token is required to authenticate the Continuous Delivery public API.

  1. Go to the Profile page.
  2. Enter the name of the token you would like to add in the NAME field.
  3. Specify an expiration date for the token in the EXPIRES AT field by typing the date or selecting it from the calendar. You can set a maximum time for the token expiration of 1 year. By default the token expires in 90 days.
  4. Click Create personal access token to create the token.
    After you create a token a window with the personal access token appears. Copy and save it to a secure location as this is the only time it is accessible.
  5. When you are done copying and saving the token, click Close.
Results

The new token appears in the Active personal access tokens table.

Revoke a personal access token

Revoke a personal access token from the Profile page. If you are an Admin and need to remove another user's token, please see Revoke a user's token.

There may be times when you need to remove a personal access token before it expires. Use this process to revoke a personal access token.

  1. Go to the Profile page. The list of tokens appears in the Active personal access tokens table.
  2. Click the Revoke button next to the token you would like to remove.
    Revoking a personal access token is permanent, you cannot undo this action.
  3. Select the Yes check box from the window that appears to confirm you wish to revoke the token.
  4. Click Revoke to revoke the token.