nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Manage API Tokens of JIRA users

badong.jm

Currently the API tokens generated by users in JIRA do not have expiry dates. This is against our policy that development tokens should only be valid until 90 days after which it should be renewed or revoked. I know administrators can manually revoke API tokens but with thousands of users I don't think it's feasible to do it that way.

Does anyone know if there is a JIRA Cloud REST API (3) end point that can allow me to get API tokens of users, this way I can build something that I can run monthly to automate reminder emails for users before we automatically revoke them?

Accepted answers

unknown

Hello @badong.jm

There are no Jira Cloud REST API endpoints to manage user tokens.

You must use the API Tokens endpoints from the Cloud Admin APIs to GET and / or DEL user tokens instead of doing it manually using the GUI.

All comments

unknown

Hello @badong.jm

There are no Jira Cloud REST API endpoints to manage user tokens.

You must use the API Tokens endpoints from the Cloud Admin APIs to GET and / or DEL user tokens instead of doing it manually using the GUI.

badong.jm

Hi @[deleted]thank you for the response. I tried using this endpoint https://api.atlassian.com/users/<account Id>/manage/api-tokens both in Postman and test python codes but getting 401 Unauthorized on both.

I know that the token works since I use it to call https://jira-pg.atlassian.net/rest/api/3/user?accountId=<account ID> with no issue.

Any idea what I might be missing?

unknown

Any idea what I might be missing?

Yep. You probably just didn't read the Admin APIs documentation properly.

You must use a key + token for an ORGANISATION ADMINISTRATOR not just any old plain user's key + token.

Only once you have that super special key + token, which only Organisation Admins can create, then can you access those endpoints.

badong.jm

@[deleted]Thanks for the idea, I'm actually an Org Admin. I was able to get this working by generating an Admin API Key. Was not aware that it would be different than the persornal API Key.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

cloud

jira-cloud