Administering tokens

Generating and revoking user tokens in SonarQube Server 10.8.

For AI agents: You're in the SonarQube Server 10.8 documentation. For a list of all 10.8 pages, see the SonarQube Server 10.8 page index. For the whole site, see the page index or the full text. For another version, replace 10.8 in the URL with that version. The latest version has no version number in its URL.

As a System Administrator, you can generate tokens of type User on behalf of another user and you can revoke any token. For more information about tokens and how to manage your own tokens, see Managing your tokens.

Generating a token on behalf of another user

1. In Administration > Security > Users, Viewing user accounts.

2. In the user’s Tokens column, select the three-dot menu. The Tokens dialog opens.

3. Enter the token name, check the expiration date, and select Generate.

Revoking a token

1. In Administration > Security > Users, Viewing user accounts.

2. In the user’s Tokens column, select the three-dot menu. The Tokens dialog opens with the list of tokens.

3. In the Actions column of the token, select Revoke.

Enforcing a maximum lifetime for tokens (from Enterprise Edition)

The ability to configure a maximum lifetime for tokens is available starting in Enterprise Edition.

As a System Administrator, you can define a maximum lifetime for any newly generated token. Non-administrator users can also set a time-to-live as long as it is less than or equal to the maximum lifetime configured at the system level. Tokens generated after updating this setting will expire either at the configured maximum lifetime or at the time set by the user, whichever comes first.

Updating this setting does not affect any existing tokens. It will only impact newly generated tokens.

To enforce a maximum lifetime for tokens at the system level:

1. Go to Administration > Configuration > General Settings > Security.

2. In Maximum allowed lifetime for token, select the lifetime you want to set.