Impact of User Account Deactivation on API Tokens and REST Calls

[Susheela.Kushwaha]

Hi,

What happens to the API token if the associated user account is deactivated? Will the token stop working? Will the REST call start failing as soon as the user's account is deactivated?

[Samuel Gatica _ServiceRocket_ · Accepted solution]

Hi @Susheela.Kushwaha 

The API Token is a string that is tied (connected) to an account. As long as that account has access to the Jira/Confluence site, the API Token will continue to work, since there is no expiry date.

• However, when you remove site access (or application access) for an account, that API token will no longer work in operations (REST API calls) against that specific site or application where the user no longer has access.

• Unfortunately, revoking a user's API Token is only available if you have an Atlassian Access subscription.

Ref: Do API tokens still remain active for deactivated users? 

Hope this helps!

Best regards

Sam

[Susheela.Kushwaha]

Thanks, Samuel! This is helpful.