API token privilege

[Richard Crist]

With regard to Jira API tokens, can I create multiple tokens with each token having a different level of access?  That is to say, can one token have same access as my email login, and another only have read access to query but not to update?

[Petter Gonçalves]

Hello @Richard Crist

Welcome to the Atlassian Community!

API tokens work just like a secure password to external scripts and processes, so they are used only to allow access to Atlassian applications, not having any connection with the permissions the related user has for their related products.

Permissions and product accesses are configured on a per-user basis, so you can create read-only access for an API token by following the steps below:

1. Create a new user in Jira with the permissions you want. For read-only access, check the documentation below:
   JIRA Cloud - How to Create a Read-Only User 
2. Logged from that user, create an API token from his Atlassian Account

Using the user and token created with the steps above, you script/process will have read-only access to your site.

Let us know if you have any questions.