I need to know if there is a way to identify users that have an active token in their accounts?

[Sofia Grunspan]

A client asked me to identify users in their instance that have or are using active tokens in their Jira account. There is a way to identify them? an add for that? 

I hope you can help me. 

[Fernando Eugênio da Silva · Accepted solution]

@Sofia Grunspan 

Is it possible only to know who created or revoked an API TOKEN if your client has Atlassian Access.

With Atlassian Access you have this filter type in your administration log. To get this information you need to take these steps: Go to User Management > on the main tab select Security > In the left side you will see Audit log option. Then you can filter by activity.

As I said, it's available only for sites with Atlassian Access product. Also there's some requests to being considered by Atlassian in the future, as this: https://jira.atlassian.com/browse/ACCESS-96

I recommend also you see the Atlassian Access doc in case another doubts: Track organization activities from the audit log | Atlassian Support

Hope this helps you.