Access token roles and policies

The following rules apply to access tokens:

• The roles and hence policies assigned to a token are defined at creation time and do not change.

• If a role is modified in the future to have more or less access, then the access tokens that have already been created will not reflect the changes.

• If a role is removed from CONNECT, then the token is still valid, but it may fail authorization due to the APIs no longer allowing the removed role.

• If the access of the user who created the Access/API Token changes, but they still have access to the account, then the token is still valid and has the same access.

• If a user is removed from an account, any access tokens they generated are invalidated.