API token Security Risk

[Anuradha Yadav]

Hi Team,

I want to know :

1.What kind of privileges we get with API token.

2.What are the security risk of API token.

This is basically because we need to provide user with the API token to perform their testing. Now JIRA being SaaS we have limited permission to provide the token.

Can any one please help me here?

Regards,

Anuradha

[Alexis Robert · Accepted solution]

Hi @Anuradha Yadav , 

API tokens are just a way to provide an easy authentication methods to scripts or software tools, they are still tied to the user that the token is generated for.

So the token generated for your user will have the same permissions as the user itself.

You can have a look at the official Atlassian documentation here : https://confluence.atlassian.com/cloud/api-tokens-938839638.html

Let me know if this helps, 

--Alexis

[Anuradha Yadav]

Thanks Alexis,

It helped .

Regards,

Anuradha