Skip to main content
POST
Create a new group token

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

organizationName
string
required

The unique identifier of the organization Standard identifier pattern for resource names

Pattern: ^[a-zA-Z0-9_ -]+$
groupName
string
required

The unique identifier of the group Group name pattern. Allows any character except / (would split the FGA resource path — see ResourceIdentifier.parseFromFga) and * (FGA wildcard). Length cap of 70 covers both user-defined groups (max 63 chars, enforced by Validators.isValidString) and workspace-derived groups (workspace name 1-63 + "-group" suffix).

Pattern: ^(?!.*\*)(?!.*[/]).{1,70}$

Query Parameters

name
string
required

The unique name for the token within the organization Standard identifier pattern for resource names

Pattern: ^[a-zA-Z0-9_ -]+$
expiresAt
string<date-time>

Optional expiration date for the token. If not provided, defaults to 99 years from creation

Response

Group token created successfully

Represents an access token/key for a service account

name
string

Unique name for the access token within the organization

Pattern: ^[a-zA-Z0-9_ -]+$
groupName
string

The name of the group that the token belongs to

Pattern: ^(?!.*\*)(?!.*[/]).{1,70}$
createdAt
string<date-time>

ISO 8601 timestamp indicating when the token was created

expiresAt
string<date-time>

ISO 8601 timestamp indicating when the token expires

expired
boolean

Whether the token has expired