# Tokens

As a System Administrator, you can generate tokens of type **User** on behalf of another user and you can revoke any token. For more information about tokens and how to manage your own tokens, see [managing-tokens](https://docs.sonarsource.com/sonarqube-community-build/user-guide/managing-tokens "mention").

{% hint style="info" %}
With SonarQube Server, you can enforce a maximum lifetime for all newly generated tokens. For more information, see [feature-comparison-table](https://docs.sonarsource.com/sonarqube-community-build/feature-comparison-table "mention").
{% endhint %}

## Generating a token on behalf of another user <a href="#generating-user-token" id="generating-user-token"></a>

1. In **Administration > Security > Users**, retrieve the user. For moer details, see [viewing-users](https://docs.sonarsource.com/sonarqube-community-build/instance-administration/user-management/viewing-users "mention").
2. In the user’s **Tokens** column, select the three-dot menu. The **Tokens** dialog opens.
3. Enter the token name, check the expiration date, and select **Generate**.

## Revoking a token <a href="#revoking-token" id="revoking-token"></a>

1. In **Administration > Security > Users**, retrieve the user. For more details, see [viewing-users](https://docs.sonarsource.com/sonarqube-community-build/instance-administration/user-management/viewing-users "mention").
2. In the user’s **Tokens** column, select the three-dot menu. The **Tokens** dialog opens with the list of tokens.
3. In the **Actions** column of the token, select **Revoke**.