Manage Access Tokens

Intro

This article explains how to generate and revoke access tokens used to import or export data from Domo.

---

Required Grants

You can generate access tokens if you have one of the following roles.

• An Admin security role
• A custom role with at least one of the following:
  • The Manage all access tokens and API clients grant
  • The Manage all company settings grant

For more information about security roles, see Managing Custom Roles.

Important: Access tokens are associated with specific user accounts and grant the same access as the user who generated the token. If the user’s permissions change, the access token reflects that. You should not share your access tokens with others.

Generate an Access Token

Follow these steps to generate an access token:

1. From the navigation header, select More > Admin.
   The Admin Settings display.
2. Under Authentication, select Access tokens.
   The Manage access tokens page displays.
3. Select Generate access token.
   
4. Specify the token information:

   1. In the Access token description field, enter a name for the token. We recommend using a name that helps you understand the purpose of the token.

   2. In the Search users field, select the user the token is for.

      Important: The access token is associated with a specific user account. Users should not share the access token with others.

   3. In the Expire after list, select the number of days/years before the token expires.

   4. Select Generate.

      
5. Copy the access token, pasting it where you can use it later. The token does not display again after you leave the Manage access tokens page.

Revoke an Access Token

Follow these steps to revoke an access token:

1. Navigate to the Manage access tokens page of the Authentication settings.
2. Locate the access token you want to revoke in the list of access tokens that have been issued. You can search by user name and token name.
3. Select Revoke.

Note: There is no warning dialog after selecting Revoke. Make sure that you are revoking the correct token.