Generating an authtoken:

Technicians can generate tokens for their accounts directly in the ADManager Plus console.

Steps to generate an authtoken:

1. Log in to ADManager Plus with a technician account that has the required delegation.
2. Navigate to My Account > Active Authtokens.



My Account window showing the Active Authtokens tab in ADManager Plus, where technicians can view, generate, or manage their authentication tokens.

3. Click +Generate Authtoken.
4. In the pop-up window, provide the following details:
• Select Technician: Select the ADManager Plus technician for whom you'd like to generate an authtoken from the drop-down menu.
• Authtoken Name: Provide an appropriate name for this authtoken.
• Scope: Select the scope of this authtoken over the delegated actions from this drop-down list.
• Expiry Time: Specify the time period after which this authtoken will expire. Enter the time in minutes, hours, days, or schedule a custom date.
• Click Generate Authtoken.

Once generated, the token will appear in the Active Authtokens list, where it can be viewed and managed.

Managing technicians’ authtokens

The built-in admin has extended privileges to create, view, and manage tokens for all technicians.

1. Log in to ADManager Plus console as a built-in admin
2. Navigate to Delegation > Configuration > Technician Authtokens.
3. The resulting window displays a detailed list of all active authtokens that are mapped to different technicians.
4. To generate a new authtoken for a specific technician, select the desired technician from the dropdown menu and click the Generate Authtoken button.
5. For auditing purposes, details of each time the built-in admin generates authtokens for other technicians will be mentioned in the Generated by column of Authtoken Details.



Technician Authtokens page under the Delegation < Configuration section in ADManager Plus, displaying authtokens for multiple technicians with details like scope and expiry date.

6. To delete different authtokens at once, select the authtokens via the checkbox and click the delete icon available at the top of the Technician Authtokens window.

Using authtoken in API calls

Tokens must always be passed in the request header. They cannot be sent as query parameters.

• Header name should be Authorization
• Header value should be {auth_token}

Scopes:

Authtokens can be restricted with scopes, which limit the operations a token can perform. Scopes provide fine-grained control, ensuring tokens are only as powerful as needed. The table below lists the available scopes, their operation codes, and the corresponding actions.