Create an advanced access token

Access tokens are used to authenticate and interact with the AIS CONNECT API. An Advanced access token provides granular control, allowing you to define whether the token applies at the account level or at a specific service level, along with the roles assigned to it.

Perform the following procedure to create an advance access token:

1. On the site navigation menu, select Integrations > Access tokens.

2. Select Create access token. The Create access token page is displayed.

   

3. For the Description box, provide a description for the access token.

4. For the Date that token should expire box, select a date on which the token must expire.

5. From the Access Token Configuration list, select Advanced. Perform one of the following:

   • To create an account level access token, select Account access token. Then choose the roles that you want to apply to the token.

   • To create a service level access token, select Service access token. Then do the following:

     1. From the Service list, choose the service for which you want to create the access token.

     2. From the Folder list, choose the folder in which the service is enabled.

     3. In the Roles box, choose the roles that you want to apply to the token.

        Field	Description
        Service	Select the service for which the token is being created (e.g., AVEVA Integration Service)
        Folder	Select the folder in which the service is enabled
        Roles	Choose the roles to assign to the token

6. Select Create. After the token is created, copy the token and save it.

   

7. Copy the generated token immediately and store it securely.

   Important: The access token is only displayed once at the time of creation. If you lose it, you will need to generate a new token.

   

8. Select Done. You are returned to the token list, where you can see all your access tokens.

   Note: Use this access token to authenticate API requests to the AVEVA Integration Service (AIS) CONNECT API. Treat this token like a password - do not share it or expose it in client-side code.