Getting Access Token Usage Information

Platform Open Q&A
, ,
1

This question is in reference to monitor the access token usage where we have the option for extracting the last used time for a token however, there is no option to check how many times a token was used within a month and using which scope in case a token has multiple scopes associated with it. The only option which seems is to monitor the access token or PAT (Personal Access Token) is by checking its last used time and scope (all scopes are given and not the one which was used) either from Web UI option of Access tokens or from Access Tokens - API tokens option under Environment API V2.

To test this, we did some hits using API and pulled audit logs but no activity was captured in audit logs related to use of access token but nothing found.

So is there a way we can get this information? If not, then it seems to be security breach as usage of tokens are not being captured which any customer would like to review monthly/quarterly.

2

Hi Raj,

This is a good observation , the information we can get from the token via API is the following:

<span>{</span>
  <span>"lastUsedIpAddress"</span><span>:</span> <span>"34.197.2.44"</span><span>,</span>
  <span>"modifiedDate"</span><span>:</span> <span>"2020-11-12T08:15:30.144Z"</span><span>,</span>
  <span>"additionalMetadata"</span><span>:</span> <span>{</span>
    <span>"dashboardId"</span><span>:</span> <span>"82402bab-7370-4359-924d-88ed13c8919a"</span>
  <span>}</span><span>,</span>
  <span>"expirationDate"</span><span>:</span> <span>"2020-11-12T08:15:30.144Z"</span><span>,</span>
  <span>"personalAccessToken"</span><span>:</span> <span>true</span><span>,</span>
  <span>"lastUsedDate"</span><span>:</span> <span>"2020-11-12T08:15:30.144Z"</span><span>,</span>
  <span>"creationDate"</span><span>:</span> <span>"2020-11-05T08:15:30.144Z"</span><span>,</span>
  <span>"name"</span><span>:</span> <span>"myToken"</span><span>,</span>
  <span>"id"</span><span>:</span> <span>"dt0c01.ST2EY72KQINMH574WMNVI7YN"</span><span>,</span>
  <span>"owner"</span><span>:</span> <span>"john.smith"</span><span>,</span>
  <span>"scopes"</span><span>:</span> <span>[</span>
    <span>"metrics.read"</span>
  <span>]</span><span>,</span>
  <span>"enabled"</span><span>:</span> <span>true</span>
<span>}</span>

I suggest you to create a new idea and it could be voted.

I leave the link to that forum.

3

Sure Daniel, I will post an idea for this. :blush:

4

I will vote for it. I have several clients with security as a top priority. And this info is very valuable as well for Personal Access Tokens.

5

Requesting @DanielS and everyone who has faced this or wants this to be implemented in future release, please KUDO this product idea: https://community.dynatrace.com/t5/Dynatrace-product-ideas/Getting-Access-Token-Usage-Information-for-Dynatrace-SaaS/idi-p/198700#M33891

6

This is not a solution - it has been 3 years and I dont see any way to get this information yet.