Remove permissions to create personal access tokens

whartdeepit

Hello,

Is there any way to remove the ability for users to create personal access tokens? This is for bitbucket server.

I did not see anything that could be disabled for that on the bitbucket.properties file documentation. I thought it may be included when I saw that personal repos could be disabled.

 

Thank you!

Stephen Sifers

Hello Brian,

API tokens are used to replace your user's passwords with a token for authentication to help improve security and avoid a password being stored within a script or automation process somewhere. Disabling API tokens would then force users to once again use their passwords instead of a permission-based token. Further information on API tokens may be found at Personal access tokens.

There is a feature request to have this type of functionality added to the product. You may find these feature request at BSERV-11512.

I hope this information proves helpful.

Regards,
Stephen Sifers