This article is for Tempo for Cloud.
Can administrators restrict, list or revoke user API and OAuth tokens?
Administrators have limited control over API and OAuth tokens in Tempo Cloud today:
-
Any user can create personal API tokens and OAuth tokens. There is no tenant-level setting to disable token creation.
-
Token creation cannot be restricted to a specific role or group.
-
There is no admin page or API endpoint that lists or revokes the tokens of all users.
What the audit log records
-
Creating, updating and deleting OAuth apps is recorded in the Audit Log and available through the Audit Events API. Secrets are not shown.
-
Personal API tokens are not recorded in the audit log.
-
API calls made with a token are not recorded in the audit log.