Create API Tokens For Other Users

Starting in Strategy (September 2026), you can enable users to create tokens for other users. This allows users to avoid bottlenecking issues gathering API tokens and allows administrators to manage the user API token lifecycle including viewing API token metadata information, and creating, refreshing, and deleting API tokens.

Prerequisite

  • Enable the Allow user to create API tokens for other users server-level setting. For more information on accessing this setting, see Edit All Server-Level Settings.

    To enable and disable this setting, you must have the Administer environment and Configure security settings.

  • You must have the Create and edit users and groups privilege.

View API Token Metadata Information

The API token tab displays all API token metadata information in the environment.

The service accounts' API tokens do not display.

  1. Open the Workstation window.

  2. In the Navigation pane, click Users & Groups.

  3. Select an Environment from the upper-left drop-down list.

  4. In the left pane, click API Token.

  5. View the following API token metadata:

    • Username: The username of the API token owner.
    • Username (Login): The login name of the API token owner.
    • Token Status: Whether the token is Active and can be used or Expired.
    • Expires On: The expiration time and date of the API token.
    • Days left: The amount of days until the API token expires.
    • Created On: The time and date the API token was created.
    • Created By: The username of the API token creator.
    • Actions: A New button to refresh the API token and a Delete button to revoke the API token.

Create User API Tokens

  1. Open the Workstation window.

  2. In the Navigation pane, click Users & Groups.

  3. Select an Environment from the upper-left drop-down list.
  4. In the left pane, click API Token.
  5. Click Create API Token.
  6. Search the user you want to create an API token for and click Create.

  7. Click Copy next to API token.

    Save the API token somewhere safe. You will not be able to see the API token again after you close the window.

  8. Note the Expires on value under API token. Your API token will only be valid until that date and time.

  9. Close the Create API Token dialog.

Refresh API Token

  1. Open the Workstation window.

  2. In the Navigation pane, click Users & Groups.

  3. Select an Environment from the upper-left drop-down list.
  4. In the left pane, click API Token.
  5. In the Actions column of the token, click New.
  6. Click Create and Copy.

  7. Close the Create API Token dialog.

Revoke API Token

  1. Open the Workstation window.

  2. In the Navigation pane, click Users & Groups.

  3. Select an Environment from the upper-left drop-down list.
  4. In the left pane, click API Token.
  5. In the Actions column of the token, click Delete.
  6. In the Delete API Token dialog, click Delete.

Restrict Users from Creating API Tokens for Other Users

  1. Disable the Allow user to create API tokens for other users server-level setting. For more information on accessing this setting, see Edit All Server-Level Settings.

  2. Note the following behavior after disabling the setting:

    • The New button under the Actions column no longer displays. Therefore, administrators can not refresh the API token for other users.

    • If you click Create API Token, the user value is only the account you're currently logged in with and can not be updated.