API Key permission

Question

Hi,

I need to connect a third party app to confluence using API token.

I can create that token here https://id.atlassian.com/manage/api-tokens

Is it possible to specify what the token can and cannot do? Where do I specify permissions for that token? I don't want that application to have a full access right.

Boris MBOUMEHANG · Accepted Answer

Hi Adam,

The permissions of your tokens are the same permissions as the Atlassian accounts which created them. So, I would advise you to create an Atlassian account dedicated to this third party app access with the permissions you need (Global permissions, space permissions and page restrictions). 
Also take care to not give access to other products (Jira, Jira Service Desk, etc.) to this account, if not needed.

I hope this will help.

Thanks
Boris