# \#token

**URL:** https://forum.gitlab.com/tag/token/77.md

[Latest](https://forum.gitlab.com/latest.md) · [Categories](https://forum.gitlab.com/categories.md) · [Tags](https://forum.gitlab.com/tags.md)

---

## [Share deploy tokens across groups? Or switch to subgroups?](https://forum.gitlab.com/t/share-deploy-tokens-across-groups-or-switch-to-subgroups/72722)

<div class="topic-metadata">

**Author:** [@jpotisch](https://forum.gitlab.com/u/jpotisch)\
**Replies:** 1\
**Last updated:** [October 2, 2026, 7:22pm UTC](https://forum.gitlab.com/t/share-deploy-tokens-across-groups-or-switch-to-subgroups/72722 "2026-10-02T19:22:48Z")

</div>

Hi there. We use GitLab.com to host numerous private repos for our organization. Let’s say they are organized like this: /groupA /project1 /project2 /groupB /project3 /project4 /shared-stuff /project5 /proje…

---

## [Selfhosted GitLab rate-limiting UNauthenticated git HTTPS limits local runners](https://forum.gitlab.com/t/selfhosted-gitlab-rate-limiting-unauthenticated-git-https-limits-local-runners/135265)

<div class="topic-metadata">

**Author:** [@torstenn1](https://forum.gitlab.com/u/torstenn1)\
**Replies:** 0\
**Last updated:** [September 11, 2026, 8:46am UTC](https://forum.gitlab.com/t/selfhosted-gitlab-rate-limiting-unauthenticated-git-https-limits-local-runners/135265 "2026-09-11T08:46:07Z")

</div>

On a self-hosted GitLab instance - experiencing a lot of trafic from Asia When we enable rate-limit for unauthenticated Git HTTPS: Our self-hosted runners get rate limited and end up getting a 429 Error: “The reques…

---

## [Security issues with trigger token](https://forum.gitlab.com/t/security-issues-with-trigger-token/134319)

<div class="topic-metadata">

**Author:** [@hikmatfarhat-ndu](https://forum.gitlab.com/u/hikmatfarhat-ndu)\
**Replies:** 1\
**Last updated:** [June 23, 2026, 3:30am UTC](https://forum.gitlab.com/t/security-issues-with-trigger-token/134319 "2026-06-23T03:30:27Z")

</div>

:hugs: Please help fill in this template with all the details to help others help you more efficiently. Use formatting blocks for code, config, logs and ensure to remove sensitive data. Problem to solve The goal is to r…

---

## [Required personal access token scopes for GitLab.com in Xcode](https://forum.gitlab.com/t/required-personal-access-token-scopes-for-gitlab-com-in-xcode/133842)

<div class="topic-metadata">

**Author:** [@matthewruzzi](https://forum.gitlab.com/u/matthewruzzi)\
**Replies:** 1\
**Last updated:** [May 17, 2026, 10:40pm UTC](https://forum.gitlab.com/t/required-personal-access-token-scopes-for-gitlab-com-in-xcode/133842 "2026-05-17T22:40:37Z")

</div>

When signing in to GitHub.com in Xcode, it shows what scopes must be set when creating a personal access token. However, when signing into GitLab.com, it doesn’t show what scopes should be selected. Which scopes should I…

---

## [Use GraphQL API with new fine-grained personal access tokens](https://forum.gitlab.com/t/use-graphql-api-with-new-fine-grained-personal-access-tokens/133461)

<div class="topic-metadata">

**Author:** [@TheJanzap](https://forum.gitlab.com/u/TheJanzap)\
**Replies:** 0\
**Last updated:** [April 11, 2026, 10:11am UTC](https://forum.gitlab.com/t/use-graphql-api-with-new-fine-grained-personal-access-tokens/133461 "2026-04-11T10:11:34Z")

</div>

GitLab Next offers the new fine-grained personal access tokens. On the docs site linked above, it only mentions the REST API. I would like to know if these new access token also cover the GraphQL API.

---

## [Multi-project downstream pipeline with API call](https://forum.gitlab.com/t/multi-project-downstream-pipeline-with-api-call/133136)

<div class="topic-metadata">

**Author:** [@EeDzjee](https://forum.gitlab.com/u/EeDzjee)\
**Replies:** 0\
**Last updated:** [March 13, 2026, 10:03am UTC](https://forum.gitlab.com/t/multi-project-downstream-pipeline-with-api-call/133136 "2026-03-13T10:03:10Z")

</div>

Problem to solve I want to create a job that triggers a pipeline and executes a script. The triggered pipeline is in another project, so it is a multi-project pipeline and I want to see the downstream pipeline in the ori…

---

## [Can't use image from one project in another project](https://forum.gitlab.com/t/cant-use-image-from-one-project-in-another-project/110126)

<div class="topic-metadata">

**Author:** [@el\_baby](https://forum.gitlab.com/u/el_baby)\
**Replies:** 3\
**Last updated:** [March 5, 2026, 12:55pm UTC](https://forum.gitlab.com/t/cant-use-image-from-one-project-in-another-project/110126 "2026-03-05T12:55:34Z")

</div>

Hi, I’m on gitlab.com and I need to use an image built in a private project from another private project. However, when I go the image project’s Settings \> CI/CD \> Job token permissions \> CI/CD job token allowlist I ca…

---

## [Refreshing personal access token doesn't refresh the expiry date?](https://forum.gitlab.com/t/refreshing-personal-access-token-doesnt-refresh-the-expiry-date/130875)

<div class="topic-metadata">

**Author:** [@pc-avodaq](https://forum.gitlab.com/u/pc-avodaq)\
**Replies:** 13\
**Last updated:** [February 19, 2026, 9:49am UTC](https://forum.gitlab.com/t/refreshing-personal-access-token-doesnt-refresh-the-expiry-date/130875 "2026-02-19T09:49:13Z")

</div>

Problem to solve I received a message that my personal access tokens (PAT) were about to expire. I have rotated them, but the expiry date has not changed. Do I need to delete and recreate completely new tokens now? If…

---

## [Ssh executor cannot create git repository (access denied)](https://forum.gitlab.com/t/ssh-executor-cannot-create-git-repository-access-denied/131597)

<div class="topic-metadata">

**Author:** [@nowrap](https://forum.gitlab.com/u/nowrap)\
**Replies:** 1\
**Last updated:** [November 30, 2025, 9:39am UTC](https://forum.gitlab.com/t/ssh-executor-cannot-create-git-repository-access-denied/131597 "2025-11-30T09:39:02Z")

</div>

Hello, I’ve had a new problem for about 3 hours. All pipeline jobs via the ssh executor fail when creating the git repository. Fetching changes... Initialized empty Git repository in /root/builds/1iDLpGhkY/0/mvp/front…

---

## [GitLab does not refresh OIDC tokens](https://forum.gitlab.com/t/gitlab-does-not-refresh-oidc-tokens/131571)

<div class="topic-metadata">

**Author:** [@GreenZombie76](https://forum.gitlab.com/u/GreenZombie76)\
**Replies:** 0\
**Last updated:** [November 25, 2025, 7:35am UTC](https://forum.gitlab.com/t/gitlab-does-not-refresh-oidc-tokens/131571 "2025-11-25T07:35:33Z")

</div>

We have a pipeline that runs against AWS. It runs terraform, but thats not really relevant, except for the fact that we want to review the plans. default: before\_script: - | cat \<\<EOF \> $TF\_ROOT/override.tf …

---

## [Project/Group Access token](https://forum.gitlab.com/t/project-group-access-token/130339)

<div class="topic-metadata">

**Author:** [@kris007](https://forum.gitlab.com/u/kris007)\
**Replies:** 1\
**Last updated:** [September 14, 2025, 3:03am UTC](https://forum.gitlab.com/t/project-group-access-token/130339 "2025-09-14T03:03:25Z")

</div>

Hi, I have a self-managed GitLab instance where API calls using project access tokens consistently fail with 404 errors. I created a new project with a project access token (API scope, Maintainer role), and while the UI …

---

## [Can personal access token names and descriptions be retroactively modified?](https://forum.gitlab.com/t/can-personal-access-token-names-and-descriptions-be-retroactively-modified/130124)

<div class="topic-metadata">

**Author:** [@rokejulianlockhart](https://forum.gitlab.com/u/rokejulianlockhart)\
**Replies:** 2\
**Last updated:** [August 29, 2025, 11:48am UTC](https://forum.gitlab.com/t/can-personal-access-token-names-and-descriptions-be-retroactively-modified/130124 "2025-08-29T11:48:52Z")

</div>

Problem to solve I want to retroactively modify personal access token names and descriptions. Steps to reproduce Create a PAT at gitlab.com/-/user\_settings/personal\_access\_tokens. Version GitLab.com SaaS

---

## [Project Access Token keep getting blocked](https://forum.gitlab.com/t/project-access-token-keep-getting-blocked/129336)

<div class="topic-metadata">

**Author:** [@Gitar](https://forum.gitlab.com/u/Gitar)\
**Replies:** 0\
**Last updated:** [August 6, 2025, 10:15pm UTC](https://forum.gitlab.com/t/project-access-token-keep-getting-blocked/129336 "2025-08-06T22:15:01Z")

</div>

Project access token created for our project on gitlab.com ends up getting blocked after a short while when used by CI to clone and push a MR. This prevents the MR from being visible and prevents access via the project a…

---

## [The access token is deleted after completing cron job](https://forum.gitlab.com/t/the-access-token-is-deleted-after-completing-cron-job/122146)

<div class="topic-metadata">

**Author:** [@agranod](https://forum.gitlab.com/u/agranod)\
**Replies:** 1\
**Last updated:** [March 3, 2025, 8:24pm UTC](https://forum.gitlab.com/t/the-access-token-is-deleted-after-completing-cron-job/122146 "2025-03-03T20:24:41Z")

</div>

Problem to solve After updating gitlab from 17.8.1 to 17.9.1, all group tokens disappeared Сreating a group or project token, the token is deleted by the MigrateRecordsToGhostUserInBatchesWorker task. The token is i…

---

## [Find out information on expired personal token?](https://forum.gitlab.com/t/find-out-information-on-expired-personal-token/121532)

<div class="topic-metadata">

**Author:** [@dnmvisser](https://forum.gitlab.com/u/dnmvisser)\
**Replies:** 0\
**Last updated:** [February 19, 2025, 10:26am UTC](https://forum.gitlab.com/t/find-out-information-on-expired-personal-token/121532 "2025-02-19T10:26:54Z")

</div>

Hi, with our self hosted instance (v17.8.2-ee) we are running into issues with expired tokens. For a valid token it is easy to fetch information about it through the API: Personal access tokens API | GitLab Docs. For ex…

---

## [CI/CD runner \`remote: Nil JSON web token\` 403 error](https://forum.gitlab.com/t/ci-cd-runner-remote-nil-json-web-token-403-error/121169)

<div class="topic-metadata">

**Author:** [@alex.zhukovskiy](https://forum.gitlab.com/u/alex.zhukovskiy)\
**Replies:** 2\
**Last updated:** [February 13, 2025, 3:09pm UTC](https://forum.gitlab.com/t/ci-cd-runner-remote-nil-json-web-token-403-error/121169 "2025-02-13T15:09:24Z")

</div>

From yesterday all pipelines on our project fails. There are no changes from our side. Any ideas how to resolve this?

---

## [Can't remove images in bulks using API with non personal access tokens](https://forum.gitlab.com/t/cant-remove-images-in-bulks-using-api-with-non-personal-access-tokens/117535)

<div class="topic-metadata">

**Author:** [@shahad](https://forum.gitlab.com/u/shahad)\
**Replies:** 3\
**Last updated:** [November 28, 2024, 2:31pm UTC](https://forum.gitlab.com/t/cant-remove-images-in-bulks-using-api-with-non-personal-access-tokens/117535 "2024-11-28T14:31:37Z")

</div>

Problem to solve removing container registry images (in bulk) using gitlab api without personal access token. container registry images tags for refrence: - v1.3.0 - v1.2.0 - v1.2.2 - v1.1.0 - v1.0.0 - latest - t…

---

## [Can't create Project access token](https://forum.gitlab.com/t/cant-create-project-access-token/117515)

<div class="topic-metadata">

**Author:** [@waspls322](https://forum.gitlab.com/u/waspls322)\
**Replies:** 0\
**Last updated:** [November 26, 2024, 3:07pm UTC](https://forum.gitlab.com/t/cant-create-project-access-token/117515 "2024-11-26T15:07:52Z")

</div>

GitLab SaaS, Free tier. If Project is standalone I can create project access tokens just fine. But if Project was added to a Group - I can’t create Project tokens. I’m aware that - "You can use project access tokens: …

---

## [Partial access to group Package Registry](https://forum.gitlab.com/t/partial-access-to-group-package-registry/102111)

<div class="topic-metadata">

**Author:** [@thjungers](https://forum.gitlab.com/u/thjungers)\
**Replies:** 1\
**Last updated:** [November 14, 2024, 1:18pm UTC](https://forum.gitlab.com/t/partial-access-to-group-package-registry/102111 "2024-11-14T13:18:21Z")

</div>

Hello, I am trying to have users access a group’s Package Registry, where different users have different permissions: Current situation My group contains multiple projects, each with its own PyPI packages in the Packag…

---

## [CI authentication with CI\_REGISTRY\_PASSWORD still fails after reverting require\_admin\_two\_factor\_authentication to false](https://forum.gitlab.com/t/ci-authentication-with-ci-registry-password-still-fails-after-reverting-require-admin-two-factor-authentication-to-false/115100)

<div class="topic-metadata">

**Author:** [@chraebs33light](https://forum.gitlab.com/u/chraebs33light)\
**Replies:** 1\
**Last updated:** [October 10, 2024, 11:53am UTC](https://forum.gitlab.com/t/ci-authentication-with-ci-registry-password-still-fails-after-reverting-require-admin-two-factor-authentication-to-false/115100 "2024-10-10T11:53:40Z")

</div>

Problem to solve After enabling require\_admin\_two\_factor\_authentication the usage of CI\_REGISTRY\_PASSWORD fails with the following error: Pulling docker image \<self-hosted-gitlab-domain\>:22443/my-group/my-project:my-tag…

---

## [Inactive Personal Access Tokens not listed](https://forum.gitlab.com/t/inactive-personal-access-tokens-not-listed/114746)

<div class="topic-metadata">

**Author:** [@sesameweb](https://forum.gitlab.com/u/sesameweb)\
**Replies:** 0\
**Last updated:** [October 4, 2024, 9:09am UTC](https://forum.gitlab.com/t/inactive-personal-access-tokens-not-listed/114746 "2024-10-04T09:09:08Z")

</div>

Problem to solve I am trying to see a Personal Access Token I created some years ago, in the UI of the online (free edition) of Gitlab (.com), at page gitlab(.com)/-/user\_settings/personal\_access\_tokens. I think the toke…

---

## [Access to container registry from other instance](https://forum.gitlab.com/t/access-to-container-registry-from-other-instance/114672)

<div class="topic-metadata">

**Author:** [@mtsba](https://forum.gitlab.com/u/mtsba)\
**Replies:** 0\
**Last updated:** [October 3, 2024, 9:02am UTC](https://forum.gitlab.com/t/access-to-container-registry-from-other-instance/114672 "2024-10-03T09:02:57Z")

</div>

We are running two different self-managed Gitlab CE instances. One of them contains a repository ci-images with a container registry containing images that are supposed to be used in CI Pipelines across various projects…

---

## [Access denied error when pushing repo via CI](https://forum.gitlab.com/t/access-denied-error-when-pushing-repo-via-ci/114420)

<div class="topic-metadata">

**Author:** [@sviridovt](https://forum.gitlab.com/u/sviridovt)\
**Replies:** 0\
**Last updated:** [September 30, 2024, 8:36am UTC](https://forum.gitlab.com/t/access-denied-error-when-pushing-repo-via-ci/114420 "2024-09-30T08:36:55Z")

</div>

Problem to solve I’m a bit puzzled by an issue with my CI pipeline. The way in which I have my project set up when I push a change, as part of the workflow the pipeline will check if there has been an API change, and if …

---

## [List all personnel access token](https://forum.gitlab.com/t/list-all-personnel-access-token/66288)

<div class="topic-metadata">

**Author:** [@mars49](https://forum.gitlab.com/u/mars49)\
**Replies:** 1\
**Last updated:** [September 2, 2024, 1:49pm UTC](https://forum.gitlab.com/t/list-all-personnel-access-token/66288 "2024-09-02T13:49:35Z")

</div>

Hello Context : I found that a personnel access token has leaked. I only have the value of the token. How can I link this to the correct user to invalidate it ? Also, for a security audit, I would like to list all pers…

---

## [How to enable notification for Project Access Tokens](https://forum.gitlab.com/t/how-to-enable-notification-for-project-access-tokens/110446)

<div class="topic-metadata">

**Author:** [@rgaiacs](https://forum.gitlab.com/u/rgaiacs)\
**Replies:** 0\
**Last updated:** [August 29, 2024, 12:19pm UTC](https://forum.gitlab.com/t/how-to-enable-notification-for-project-access-tokens/110446 "2024-08-29T12:19:26Z")

</div>

I created a project access token for my project. The project access token is used by a GitLab CI/CD to send some merge requests. The merge requests are created as expected. Unfortunately, I never received an email r…

---

## [How to create gitlab tokens not through console](https://forum.gitlab.com/t/how-to-create-gitlab-tokens-not-through-console/107487)

<div class="topic-metadata">

**Author:** [@kris007](https://forum.gitlab.com/u/kris007)\
**Replies:** 6\
**Last updated:** [July 29, 2024, 3:02pm UTC](https://forum.gitlab.com/t/how-to-create-gitlab-tokens-not-through-console/107487 "2024-07-29T15:02:22Z")

</div>

Hi all, I’m trying to create some users and various tokens for my self managed gitlab instance and for gitlab.com saas version. GitLab Self Managed Instance: Users : Users can be created via the rails console. I see t…

---

## [Token scopes for GraphQL mutation commitCreate](https://forum.gitlab.com/t/token-scopes-for-graphql-mutation-commitcreate/106740)

<div class="topic-metadata">

**Author:** [@unbekanntes-pferd](https://forum.gitlab.com/u/unbekanntes-pferd)\
**Replies:** 1\
**Last updated:** [June 27, 2024, 10:03am UTC](https://forum.gitlab.com/t/token-scopes-for-graphql-mutation-commitcreate/106740 "2024-06-27T10:03:09Z")

</div>

Problem to solve I want to automate the upload of a file into a Gitlab repository using the GraphQL API - more specifically the commitCreate mutation (GraphQL API resources | GitLab Docs). The request payload looks like…

---

## [Unable to create a PAT in project](https://forum.gitlab.com/t/unable-to-create-a-pat-in-project/105448)

<div class="topic-metadata">

**Author:** [@NSR](https://forum.gitlab.com/u/NSR)\
**Replies:** 0\
**Last updated:** [May 30, 2024, 12:22pm UTC](https://forum.gitlab.com/t/unable-to-create-a-pat-in-project/105448 "2024-05-30T12:22:16Z")

</div>

Hi Gitlab Experts!! I’m facing an issue when creating a personal access token in the project. When I try to create it, I receive the error message: ‘Failed to create a new access token: A user, alias, or group already e…

---

## [Project Access Token and include](https://forum.gitlab.com/t/project-access-token-and-include/56008)

<div class="topic-metadata">

**Author:** [@kwak.repo](https://forum.gitlab.com/u/kwak.repo)\
**Replies:** 7\
**Last updated:** [May 6, 2024, 11:50am UTC](https://forum.gitlab.com/t/project-access-token-and-include/56008 "2024-05-06T11:50:58Z")

</div>

Hello everybody, I’m facing an issue and I don’t find anything to fix it nor find another way to do it… See, my colleagues and I have developed some CI templates, so inside of our “end projects”, our .gitlab-ci.yml fil…

---

## [Not able to use group token to access a release](https://forum.gitlab.com/t/not-able-to-use-group-token-to-access-a-release/101951)

<div class="topic-metadata">

**Author:** [@fberzolla](https://forum.gitlab.com/u/fberzolla)\
**Replies:** 0\
**Last updated:** [March 25, 2024, 5:10pm UTC](https://forum.gitlab.com/t/not-able-to-use-group-token-to-access-a-release/101951 "2024-03-25T17:10:24Z")

</div>

Hi team Is there a restriction when using Group Gitlab Token in order to access release ? I’m trynig to access a release asset archive/v5.1.0/common-management-layer-v5.1.0.tar.gz I’ve created a group access token wit…

[Next page](https://forum.gitlab.com/tag/token/77.md?match_all_tags=true&page=1&tags%5B%5D=token)