Project and Workspace Access Tokens

3 posts · Nov 2022 – Apr 2025

What this trail covers

Bitbucket Cloud enhances its authentication and access management capabilities by introducing Project and Workspace Access Tokens. These tokens extend the functionality of Repository Access Tokens, allowing for more scalable and granular control over API access and Git operations at the project and workspace levels. This evolution aims to simplify token management for users with multiple repositories and projects, improving security and operational efficiency. This post introduces default grant types for tokens and enforces expiry durations for all newly created tokens, with configurable policies for admins.

All Atlassian trails

Apr 2025Introducing token rotation for access tokensIntroduces token rotation for access tokens (repository, project, and workspace types). Token rotation generates a new secret and allows for a new expiration period, while maintaining original access and scopes. The old token is phased out quickly: invalid if expired, usable for remaining time if expiring within 30 minutes, or reduced to 30 minutes lifespan if expiring in more than 30 minutes. This streamlines expiration management, simplifies updates, and keeps credentials current.
Mar 2025Enhancing security in Bitbucket: Introducing expiry for access tokensThis post introduces mandatory expiry durations for all newly created Bitbucket Cloud access tokens (workspace, project, and repository levels). It details admin controls for setting expiration policies (90, 180, 365 days, or no expiry) and how users must select an expiration period within these limits when creating tokens. This enhances security by reducing the risk of long-lived, unmanaged credentials.
Feb 2023Introducing Project and Workspace Access TokensThis post introduces Project and Workspace Access Tokens for Bitbucket Cloud, building upon the existing Repository Access Tokens. These new token types allow for managing API access and Git operations across all repositories within a specific project or the entire workspace, offering a more scalable solution for authentication compared to individual repository tokens. The feature is available on the Bitbucket Premium plan and is accessible via the 'Access tokens' section in the respective Settings pages.
Nov 2022Access Bitbucket Cloud repositories more securely with resource-scoped access tokens.This post introduces Repository Access Tokens as a new API control, disconnected from individual users and scoped to specific repositories. It details how these tokens provide fine-grained access control for CI/CD pipelines and decouple API access from user lifecycle changes. The post also announces plans to expand this concept to Project Access Tokens and Workspace Access Tokens in the future.
Nov 2022Launching increased transparency and control for workspace invitationsThis post introduces default groups for new workspace invitations, allowing invited users to be automatically added to a designated group. It also enables open invitations, where users can join the workspace and be added to the default group without immediate project or repository permissions. Furthermore, it enhances governance by allowing workspace admins to restrict invitations, disable end-user invitations, or enforce an email domain allowlist.
Advertisement