diff options
Diffstat (limited to 'doc/user/admin_area/credentials_inventory.md')
| -rw-r--r-- | doc/user/admin_area/credentials_inventory.md | 89 |
1 files changed, 7 insertions, 82 deletions
diff --git a/doc/user/admin_area/credentials_inventory.md b/doc/user/admin_area/credentials_inventory.md index 9bacd101c48..f38eed5de43 100644 --- a/doc/user/admin_area/credentials_inventory.md +++ b/doc/user/admin_area/credentials_inventory.md @@ -1,86 +1,11 @@ --- -stage: Manage -group: Authentication and Authorization -info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/product/ux/technical-writing/#assignments -type: howto +redirect_to: '../../administration/credentials_inventory.md' +remove_date: '2023-10-07' --- -# Credentials inventory **(ULTIMATE SELF)** +This document was moved to [another location](../../administration/credentials_inventory.md). -> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/20912) in GitLab 12.6. -> - [Bot-created access tokens not displayed in personal access token list](https://gitlab.com/gitlab-org/gitlab/-/issues/351759) in GitLab 14.9. - -GitLab administrators are responsible for the overall security of their instance. To assist, GitLab -provides a Credentials inventory to keep track of all the credentials that can be used to access -their self-managed instance. - -Use Credentials inventory to see for your GitLab instance all: - -- Personal access tokens (PAT). -- Project access tokens (GitLab 14.8 and later). -- SSH keys. -- GPG keys. - -You can also [revoke](#revoke-a-users-personal-access-token) and [delete](#delete-a-users-ssh-key) and see: - -- Who they belong to. -- Their access scope. -- Their usage pattern. -- When they expire. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/214809) in GitLab 13.2. -- When they were revoked. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/214809) in GitLab 13.2. - -To access the Credentials inventory: - -1. On the left sidebar, expand the top-most chevron (**{chevron-down}**). -1. Select **Admin Area**. -1. Select **Credentials**. - -## Revoke a user's personal access token - -> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/214811) in GitLab 13.4. - -If you see a **Revoke** button, you can revoke that user's PAT. Whether you see a **Revoke** button depends on the token state, and if an expiration date has been set. For more information, see the following table: - -| Token state | Show Revoke button? | Comments | -|-------------|---------------------|----------------------------------------------------------------------------| -| Active | Yes | Allows administrators to revoke the PAT, such as for a compromised account | -| Expired | No | Not applicable; token is already expired | -| Revoked | No | Not applicable; token is already revoked | - -When a PAT is revoked from the credentials inventory, the instance notifies the user by email. - - - -## Revoke a user's project access token - -> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/243833) in GitLab 14.8. - -The **Revoke** button next to a project access token can be selected to revoke that particular project access token. This both: - -- Revokes the token project access token. -- Enqueues a background worker to delete the project bot user. - - - -## Delete a user's SSH key - -> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/225248) in GitLab 13.5. - -You can **Delete** a user's SSH key by navigating to the credentials inventory's SSH Keys tab. -The instance then notifies the user. - - - -## Review existing GPG keys - -> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/282429) in GitLab 13.10. -> - [Feature flag removed](https://gitlab.com/gitlab-org/gitlab/-/issues/292961) in GitLab 13.12. - -You can view all existing GPG in your GitLab instance by navigating to the -credentials inventory GPG Keys tab, as well as the following properties: - -- Who the GPG key belongs to. -- The ID of the GPG key. -- Whether the GPG key is [verified or unverified](../project/repository/gpg_signed_commits/index.md) - - +<!-- This redirect file can be deleted after <2023-10-07>. --> +<!-- Redirects that point to other docs in the same project expire in three months. --> +<!-- Redirects that point to docs in a different project or site (for example, link is not relative and starts with `https:`) expire in one year. --> +<!-- Before deletion, see: https://docs.gitlab.com/ee/development/documentation/redirects.html --> |