Where can I see all the API tokens being run in Smartsheet?

I am a relatively new system admin and was just made aware that an API token is no longer working. Is there a place where I can go to see all API tokens being used in the system, rather than just mine?

Answers

  • =Chris Palmer
    =Chris Palmer ✭✭✭✭✭

    On the bottom left corner of the screen click on your profile.

    Then select "Personal Settings"


    Select API Access.
    You can generate a new token if the other is no longer working.

  • Lee Joramo
    Lee Joramo ✭✭✭✭✭✭
    edited 05/08/24

    I believe that Smartsheet API keys have a 10 year life before they have to be replaced. @Mr. Chris showed how to see your own API keys.

    But as a Smartsheet Admin for your organization, you maybe being asked to find a key that expired related to another account. I don't see a a way through the Admin Center web interface or via the API to discover who created the expired key. In this case, you might need to contact Smartsheet's support to see if they can offer any help.

  • cnikkih
    cnikkih ✭✭✭✭
    edited 05/09/24

    Yeah, I know where to see my own, but I'm being asked to find someone else's that is no longer working and we don't even know who set it up to begin with. The only thing we can find is the bearer token. It can't have been 10 years old because the system using it has only been in use for 6 years. I will reach out to support for more info.

  • =Chris Palmer
    =Chris Palmer ✭✭✭✭✭

    It's likely the person who is no longer working had their Smartsheet license deactivated,
    thus making their API token no longer valid.

    Is there code currently running with the previous API?
    If you have access to that code the API token should be listed there.

    Your best option is to generate a new API token and update any code that was hindered from the old API token.

  • cnikkih
    cnikkih ✭✭✭✭

    I will reach out to the developer and have him try to figure out if he can see that code and just create a new one. My biggest confusion lies in the fact that the only people we think could have created this have been gone for a year or more, so their accounts have been long deactivated and it's weird that it stopped working now. But regardless, we just need to get it going again. Thanks for your guidance!

  • Lee Joramo
    Lee Joramo ✭✭✭✭✭✭

    @cnikkih To avoid this issue on my organization's Smartsheet instance, we allocated a dedicated api.robot@OUR_DOMAIN.COM service account to hold API keys so that they are not deleted when a person leaves. We also used this account to own some critical sheets that are used for lookups across the organization.

  • cnikkih
    cnikkih ✭✭✭✭

    Yeah, I'm going to suggest that as well!