Create a new group token
Creates a new access token for the specified group. The token secret is only returned in the response to this creation request and cannot be retrieved later.
Authorization: Requires group admin permissions. Security: Store the returned secret securely as it cannot be retrieved again.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
The unique identifier of the organization Standard identifier pattern for resource names
^[a-zA-Z0-9_ -]+$The unique identifier of the group
Group name pattern. Allows any character except / (would split the FGA resource path — see ResourceIdentifier.parseFromFga) and * (FGA wildcard). Length cap of 70 covers both user-defined groups (max 63 chars, enforced by Validators.isValidString) and workspace-derived groups (workspace name 1-63 + "-group" suffix).
^(?!.*\*)(?!.*[/]).{1,70}$Query Parameters
The unique name for the token within the organization Standard identifier pattern for resource names
^[a-zA-Z0-9_ -]+$Optional expiration date for the token. If not provided, defaults to 99 years from creation
Response
Group token created successfully
Represents an access token/key for a service account
Unique name for the access token within the organization
^[a-zA-Z0-9_ -]+$The name of the group that the token belongs to
^(?!.*\*)(?!.*[/]).{1,70}$ISO 8601 timestamp indicating when the token was created
ISO 8601 timestamp indicating when the token expires
Whether the token has expired