Is it possible to restrict people in the Rest API and if so, how is this possible (Atlassian Guard)?

[Yassir Abdelmajid]

Is it possible to restrict people in the Rest API and if so, how is this possible (Atlassian Guard)?

[Samuel Gatica _ServiceRocket_]

Hi @Yassir Abdelmajid 

This cannot be accomplished without the use of plugins. There is a suggestion with Atlassian regarding this improvement. Please visit the Atlassian Marketplace to explore options that may meet your needs. 

Best regards

Sam

[Christof Cuypers]

I agree with @Samuel Gatica _ServiceRocket_ that there is no robust, out-of-the-box solution available yet.

However, if you have some development expertise, you might consider automating the solution @Harrison Ponce  mentioned using the Admin API. You could create a service that periodically deletes all API tokens that are not created or linked to a specific user.

For more details, refer to: https://developer.atlassian.com/cloud/admin/user-management/rest/api-group-api-tokens/#api-group-api-tokens 

[Harrison Ponce]

Hi @Yassir Abdelmajid ,

Adding on to what @Samuel Gatica _ServiceRocket_ wrote, it is not possible without a plugin/app. What you can do, however, is view the API tokens that have been created and manage them.

The API key for the user respects permissions the user has in the system, so it will not allow them to read, write, etc. for anything they cannot do within the UI.