Obtain a Personal Access Token

Use personal access tokens to authenticate service users for machine-to-machine interactions.

To create a personal access token:

1. Sign in to the Identity and Access Management web application in Provider Connectivity Assurance.

   If DNS is available, access the web application at https://auth.<deployment URL>.
   If DNS is unavailable, use the IP address of the Provider Connectivity Assurance deployment tenant and port 3443.

   https://<IP address>:3443        // For deployments without DNS
   https://auth.<deployment URL>   // For deployments with DNS

2. Set the organization to the Provider Connectivity Assurance tenant.
   Use the organization drop-down list (upper-left) to find your specific tenant name.    

   

   Note: The name pca may have been used for the tenant during installation, or a different name may have been chosen by the installer.    

3. Create a service user.

   1. Choose Users > Service Users.

   2. Click + New.  

      

   3. Enter the required fields.

      • In User Name, we recommend to use the <username>@<tenant_name> format. For example, integrationUser@pca.

      • In the Access Token Type drop-down list, select Bearer.

   4. Click Create.

4. Assign the an appropriate role to the service user. For more details on roles, see User Management.

   1. In the left-side navigation, choose Authorizations and then click + New.

      

   2. In Search for a project, choose Analytics and then click Continue.

      

   3. Select the checkbox for your desired role. Take note of the following mapping of Role names in the Identity and Access Management backend service vs in the Analytics UI:

      Analytics Role Name	IAM Role Name
      Admin	tenant-admin
      User	tenant-user
      Contributor	tenant-contributor
      Portal	tenant-portal

      

   4. Click Save.

5. Generate a new personal access token with an appropriate expiration date.

   1. In the left-side navigation, choose Personal Access Tokens and then click + New.

   2. Select an expiration date, and then click Add.
      The personal access token appears.
      Note: You must regenerate the token and update it before it expires. Use an expiration date that aligns with your organization’s processes.

      

6. Copy and securely store this personal access token to the machine that requires it as you will not be able to retrieve it again.