We’ve moved!

Our Help Center has a new home and our URLs have changed. Please update your bookmark to this page before April 30, 2026

Personal Access Token Fields

Personal access token form fields define authentication scope and permissions for API requests.

The table below lists the fields of the Personal Access Token form and provides utilization guidelines for each field.

Field Label	Utilization Guideline
Name	The `Name` field is used to enter the name of the personal access token.
Scopes
Effect	The `Effect` field is used to specify if API requests that match the actions and conditions of the scope are allowed. The available options are: Allow– Allow matching API requests Deny– Deny matching API requests
Actions	The `Actions` table field is used to relate the scope to actions on record types. Example actions are: Request – Read Person – Update Configuration Item – Create Depending on the values of the `Effect` field and `Conditions` table field, the selected actions are either allowed or denied.
Conditions	The `Conditions` table field is used to restrict the scope by adding specific conditions that the API request must meet. The available condition is: Account– The working account of the API request (i.e. the value of the “X-Xurrent-Account” header in an API request).