limit expiry time of personal access tokens

[Tony Rice]

How can I limit my users to creating personal access tokens with no more than 90 day expiry and disallow tokens with no expiration.

[Tim Perrault]

Hi @Tony Rice

You can use this system property -Datlassian.pats.max.tokens.expiry.days=90. This property will set the maximum number of days for a token to expire. If you decided to change this property, the new value will apply only to tokens created after your change and won't affect already created tokens.

https://confluence.atlassian.com/enterprise/using-personal-access-tokens-1026032365.html 

https://confluence.atlassian.com/adminjiraserver/setting-properties-and-options-on-startup-938847831.html#Settingpropertiesandoptionsonstartup-startup_params