API Token and Authentication Issues

Personal Access Token (PAT) creation fails, tokens do not work as expected, or there is confusion about token scope and permissions. This affects API authentication and programmatic access to DataHub.

Note: For DataHub Cloud customers, infrastructure-level changes (Kubernetes, AWS resources, operating system configurations) are managed by DataHub Support. The solutions below focus on configuration changes that customers can implement.

1. Verify token creation permissions:

   • Only users with "Generate Personal Access Tokens" privilege can create tokens
   • Check Settings → Access Tokens to see if the option is available
   • Admin users may need to grant this privilege via Policies

2. Create Personal Access Token:

   • Navigate to Settings → Access Tokens
   • Click "Create new token"
   • Choose appropriate duration (note: ONE_WEEK duration may have issues in some versions)
   • Recommended: Use 1MONTH or 3MONTHS duration for stability

3. Use token in API calls:

curl -X POST 'https://your-datahub.acryl.io/api/graphql' \
  -H 'Authorization: Bearer YOUR_TOKEN_HERE' \
  -H 'Content-Type: application/json' \
  -d '{"query": "{ ... }"}'

4. Troubleshoot token issues:
   • Tokens are user-scoped, not organization-scoped
   • Regenerate token if it stops working unexpectedly
   • Check token expiration date
   • Ensure correct Authorization header format with "Bearer" prefix

Always backup your DataHub configuration before making changes. Test solutions in a non-production environment when possible.

• GraphQL API Guide

• 5668, 5814, 5809, 5715, 5690, 4755