diff --git a/doc/user/profile/personal_access_tokens.md b/doc/user/profile/personal_access_tokens.md index ae73842dd988fcd1da1ecf6a05ed38a5c8d204fb..776dc4542ee370f0b95f00a78b73c4a7e7318827 100644 --- a/doc/user/profile/personal_access_tokens.md +++ b/doc/user/profile/personal_access_tokens.md @@ -28,6 +28,20 @@ For examples of how you can use a personal access token to authenticate with the GitLab also offers [impersonation tokens](../../api/README.md#impersonation-tokens) which are created by administrators via the API. They're a great fit for automated authentication as a specific user. +## Creating a personal access token + +You can create as many personal access tokens as you like from your GitLab +profile. + +1. Sign in to GitLab. +1. In the upper-right corner, click your avatar and select **Settings**. +1. On the **User Settings** menu, select **Access Tokens**. +1. Choose a name and optional expiry date for the token. +1. Choose the [desired scopes](#limiting-scopes-of-a-personal-access-token). +1. Click the **Create personal access token** button. +1. Save the personal access token somewhere safe. If you navigate away or refresh +your page, and you did not save the token, you must create a new one. + ## Enable or disable notification for Expired personal access token **(CORE ONLY)** [GitLab administrators with access to the GitLab Rails console](../../administration/feature_flags.md) @@ -45,20 +59,6 @@ To disable it: Feature.disable(:expired_pat_email_notification) ``` -## Creating a personal access token - -You can create as many personal access tokens as you like from your GitLab -profile. - -1. Log in to GitLab. -1. In the upper-right corner, click your avatar and select **Settings**. -1. On the **User Settings** menu, select **Access Tokens**. -1. Choose a name and optional expiry date for the token. -1. Choose the [desired scopes](#limiting-scopes-of-a-personal-access-token). -1. Click the **Create personal access token** button. -1. Save the personal access token somewhere safe. If you navigate away or refresh -your page, and you did not save the token, you must create a new one. - ### Revoking a personal access token At any time, you can revoke any personal access token by clicking the