How to restrict the users with specific role to create an Api Token

[Sunilkumar k]

Hi,

I want to allow only the users with particular role to create an api token and i want to restrict the users with other roles to create an api token , How can i achieve this

[Oliver Siebenmarck _Polymetis Apps_]

Hi @Sunilkumar k ,

To the best of my knowledge, you currently cannot disable the creation of API tokens for your site and/or org in Atlassian Cloud, at least not without Atlassian Access. 

However, with managed users in Atlassian Access you can see who uses API tokens, revoke them if needed and even disallow the creation/use of API tokens. 

Hope that helps,
 Oliver

EDIT: Updated answer to reflect that Atlassian Access/Atlassian Guard now has that feature.

[janic.siegenthaler]

Is there an update?

[Oliver Siebenmarck _Polymetis Apps_]

Hi @janic.siegenthaler ,

Indeed, there seems to have been an update since I first answered this question. It is now possible to block the creation/use of API tokens, at least with Atlassian Access. To quote the documentation:

Admins can control whether managed users are allowed to create new user API tokens or use existing tokens by navigating to the API tokens setting under Authentication policies

Hope that helps,
 Oliver