Force Admin Approval for API Token

[Mathew Lederman]

Can I force admin approval for users to obtain API tokens? I want to keep better documentation of who is connected to our instance and for what purposes. The best way I can think of to do this is to require admin approval.

Unfortunately the only options I can find are Allow or Block in the authentication settings. I don't want to block access, simply require documentation.

[David Bakkers]

Hello @Mathew Lederman 

There are no mechanisms in Jira Cloud that allows an Admin to approve or be notified of a user's creation or use of an API Token. There is only the simple on / off setting that you've discovered will enable or disable the use of all API tokens, which affects everyone.

However, you can always use the Cloud Admin APIs instead of the GUI to find if particular user has created an API token and delete it individually. Google 'jira cloud admin manage user rest api tokens' and the second result is the thread in this forum that discusses that.

This approach is classic Whack-A-Mole however, since the user can just create another :)