Hi, We can see that in IdentityNow non admin users can also create personal access token and they can even add multiple scopes. Here I am looking for two options: is there any option we have where we can disable PAT creation by non-admin users. if option 1 is not possible, can we send email to…

Anyone having access to SailPoint will be able to create PAT. There are APIs available for PAT where you could schedule a job to fetch the list of PATs and send notifications to the Admins. FYR . Also, everyone will not be able to add all the scopes. They could only add scopes based on their User A…

hi @hranjan3 , The PAT which non admin users generated cannot be used as they do not have admin privileges in IdentityNow. There is no way to disable that option. Thanks, Uday

Thanks @zeel_sinojia and @udayputta for your inputs!

Can we write custom scheduled job in ISC ?

Thanks ! Can workflow be scheduled ? or workflow can be triggered only based on any events ?

You got the answer but yes scheduled trigger is available.

IdentityNow disable option to create personal access token creation by non admin users

Identity Security Cloud (ISC) ISC Discussion and Questions

zeel_sinojia (Zeel Sinojia) September 26, 2024, 1:51pm 6

@vishal_kejriwal1 ,

Using Workflows you could write a scheduled job. FYR

If you have something specific in mind, do let me know and I could help you on that.

1 Like

Topic		Replies	Views
Personal Access Tokens now available to all users Announcements identity-security-cloud	2	1838	July 11, 2022
Generating a PAT through the API for another Identity ISC Discussion and Questions apis , identity-security-cloud , authentication	12	1342	August 8, 2023
Can we create PAT without login to tenant? ISC Discussion and Questions identity-security-cloud	24	226	February 9, 2025
Create Oauth Clients with scopes via API REST ISC Discussion and Questions	8	2895	July 11, 2023
Unable to Assign sp:scopes:read Scope to PAT in Tenant ISC Discussion and Questions apis , identity-security-cloud	2	40	August 10, 2025

IdentityNow disable option to create personal access token creation by non admin users

Related topics