API for rotating API Tokens and checking expiration date

@Arkadiusz Wroblewski, thank you for getting back to me! I have a follow up question.

Based on the documentation, it looks like this endpoint requires an organization-level API key rather than an API token? I assume there isn't a way with the API token?

Hello @Victor La 

In this case "key" and "token" are essentially the same thing. The difference is that the process needs Organization Admin level access to see all the API token names and expiration dates across all accounts in the Organization. The only way to get a "token" that has Organization Admin level access is to generate it from the Admin Hub > Organization Settings > API Keys. That can be done only by an Organization Admin.

@Victor La 

Yes, @Trudy P Claspill  elaborated on that a little.

Look at it from this perspective: generating API tokens sits under user settings because they are Personal (Admins can Restrict who can create them or revoke them), while the overview and management of keys/tokens sits under organization administration.

For many administrative automation tasks, you need an organization-level API key, simply because the relevant API endpoints belong to the organization administration layer.

@Trudy P Claspill @Arkadiusz Wroblewski  It’s helpful to know that expiration dates are available through the organization API, although unfortunately that doesn’t help our use case because our IT department doesn't provide organization-level API keys.

It would be nice to have a user-level token expiration endpoint or an API for rotating API tokens, but I guess we have to live with what we can get :)

Thank you both for your help and clarification!