Restrict API Token to read-only access?

[Per Mildner]

I have created an API Token (at https://id.atlassian.com/manage-profile/security/api-tokens) and  successfully use the API token in a script to read JIRA Cloud issue descriptions.

For security reasons I would like to restrict the script to read-only access, but I see no way to limit the permissions of an API Token.

Is it possible to restrict the permissions associated with an API Token?

[marc -Collabello--Phase Locked- · Accepted solution]

Hi @Per Mildner ,

It is not possible to restrict the scopes of such a token.

One workaround is to create a new user, which has only read-only access.  Then create an API token for this new user, and the API token will have the same rights/restrictions as this new user.