Manage API token through API REST call

Question

Hey everyone, 
Here is my use case, my account is an org admin of atlassian and I created a org API token. 
What I would like to do, is creating a new API token, for a specific user, via an API call. 
Something like

https://api.atlassian.com/users/{account_id}/manage/api-tokens/

and a body with the name and the expiry date, which the API should response with the token. 
I know that's what is used in the background when doing it in the UI. 
When I try to do so, the answer is the following:

"key": "forbidden.action",    "context": {        "allowed": false,        "reason": {            "key": "myselfOnly"        }}And I can't figure how to do so with the user. 
Thanks in advance for your help !

Valentin Mercier · Answer

Seems strange tho, an API call is done when I click the button in the page. 
And I already have a token for such things, the goal is to replace it when it's almost expired with an automated process that will let me store it in a PAM system.

Using the https://api.atlassian.com/users/{account_id}/manage/api-tokens/ with an authenticated user with his own API token returns me "Unauthorized" which means that the Bearer Token for the user cannot and is not used correctly for such a call.

It's kind of a shame that can't do that, or that Atlassian is not willing to share how we could do that :(

Mohamed Benziane · Answer

Hi,

it seems impossible unfortunately :

https://community.developer.atlassian.com/t/is-it-possible-to-generate-api-tokens-for-cloud-by-rest/46300

Valentin Mercier · Answer

Hi @Mohamed Benziane 
Thanks for the answer, I realized that already.

My question was more, with a user, can I then create an API token with an API call? The thread you linked doesn't seems to answer that question unfortunately.

Cheers