Managing Security Tokens
Select the User Settings icon > Manage Token.
Access to FME Server is controlled through security tokens. Use the Token Management page to work with security tokens in the following ways:
- API Tokens: For development purposes, you can create and manage tokens that allow unauthenticated access to FME Server.
- Session Tokens: Session tokens are created automatically when you log on to FME Server.
- All Tokens: Users with Manage permission in User Management can view and manage the tokens of all users.
Working with API Tokens
For development purposes, you can create and manage tokens that allow unauthenticated access to FME Server.
To get started, select the API Tokens tab.
- Click New or, to duplicate an existing token, select it and click Actions > Duplicate.
- On the Create (or Duplicating) API Token page, specify a token Name, Description (optional), Expiration, and Enabled status.
- To grant the user of the token all permissions of the current user, slide the All Permissions control to the right. Otherwise, configure the permissions as desired.
- Access: Access the Automations page, and list workflows and tags.
- Create: Create workflows.
- Read: View a workflow and its log file.
- Write: Edit or remove a workflow.
- Run: Start and stop a workflow.
- Access: Access the Database Connections and Web Connections pages.
- Create: Create connections.
- Manage: Access, create, and remove connections.
- Access: Manage web services.
- Access: Access the Dashboards page.
- Access: Access the Jobs page to view the jobs you have run, or cancel any of your jobs that are currently running or in queue.
- Manage: Access and manage the jobs of all users. You can:
- Cancel any job that is currently running.
- Remove the history of jobs that were previously run.
- Manage: Licensing, Engines, and Deployment Status.
- Access: Access Server Analytics.
- Manage: Access Network & Email configurations, except Services.
- Upload: Allow publishing FME packages from FME Desktop to FME Server.
- Access: Access the Projects page.
- Create: Create projects.
- Read: View information about a project.
- Write: Edit a project.
- Delete: Delete a project, or delete items from a project.
- Access: Access the Publications page.
- Create: Create Notification Service Publications.
- Read: View information about a publication.
- Write: Edit a publication.
- Remove: Delete a publication.
- Manage: Access to Queue Control, except engine assignment rules (also requires Manage permission in Licensing & Engines).
- Access: Access the Workspaces page.
- Create: Create repositories.
- Download: Download workspaces and other repository items from FME Server into Workbench.
- Read: View repository information.
- Publish: Publish workspaces and other items to the repository from Workbench.
- Run: Run repository workspaces from FME Server.
- Remove: Remove a repository, or remove items from a repository.
- Access: Access the Resources page.
- Create: Create connections to network resources.
- Access: Read and download a file.
- List: List the folders and files of a resource.
- Write: Write to files.
- Upload: Upload files.
- Remove: Delete files.
- Access: Access the Run Workspace page.
- Advanced: Access Job Directives when running workspaces.
- Access: Access the Schedules page.
- Create: Create schedules.
- Full Access: Edit or delete a schedule.
- Manage: Access to Security configurations.
- Access: Access the Gallery Apps page.
- Create: Create new gallery apps.
- Run: Open links in a gallery app.
- Read: Access a gallery app.
- Write: Edit or remove a gallery app.
- Access: Access the Workspace Apps page.
- Create: Create new workspace apps.
- Run: Run a workspace app.
- Read: Access a workspace app.
- Write: Edit or remove a workspace app.
- Manage: Configure the FME Server services.
- Full Access: Manage FME Server services.
- Access: Access the Streams page.
- Create: Create streams.
- Read: View a stream.
- Write: Edit or remove a stream.
- Access: Access the Subscriptions page.
- Create: Create Notification Service Subscriptions.
- Read: View information about a subscription.
- Write: Edit a subscription.
- Remove: Delete a subscription.
- Manage: Configure system cleanup.
- Manage: Configure System Events.
- Access: Access the Topics page.
- Create: Create topics.
- Read: View information about a topic.
- Write: Edit a topic.
- Publish: Publish notifications to a topic.
- Remove: Delete a topic.
- Manage: Configure users and roles.
- Access: Commit versions and view repository history.
- Manage: Enable version control and configure with a remote Git repository.
- Access: Access the Workspace Viewer.
- Click OK.
- Click Download to save the token. After the token downloads, click OK.
WARNING: To guarantee the security of the FME Server, ensure a token's permissions are configured so that it can be used only for its intended purpose, such as running a particular workspace.
Individual Automations:
Note: Automations requires additional permissions. You are prompted to grant any additional permissions that are required.
Manage: Access and manage Broadcast Messages.
Individual Connections:
Note: Licensing permission also requires membership in the fmesuperuser role.
Individual Projects:
Note: Access or Create permission is not required to have Read/Write/Delete permission on individual projects. These tasks can still be accomplished with the REST API.
Individual Publications:
Note: Access permission is not required to run a workspace. Only Run permission on the applicable repository is required (see below).
Individual Repositories:
Note: Users must also have Allow permission on the applicable service (see Services) when running workspaces.
Note: You must uncheck all five permissions to completely remove a role from membership with a repository.
Individual Resource connections (top-level folders):
Individual Schedules:
Individual Gallery Apps:
Individual Workspace Apps:
Individual Services:
Individual Streams:
Individual Subscriptions:
Individual Topics:
Note: Version Control must be enabled to view these permissions.
- Click on the token to open it.
- On the Editing page, update the Description and/or Expiration, and click OK.
Select the token and click Actions > Remove, Enable, or Disable.
Alternatively, to enable or disable a token, click on the token. On the Editing page, update the Enabled status, and click OK.
Working with Session Tokens
When you log in to the Web User Interface, FME Server grants you a security token to use the Interface for a period of 30 minutes. However, FME Server automatically extends this period if you remain logged in for more than 20 minutes and your browser window remains open. To view your token ID and expiration, select the Session Tokens tab.
To remove, disable, or enable an active session token, select it and click Actions > Remove, Disable, or Enable. To remove an expired token, select it and click Remove.
Note: Expired session tokens cannot be enabled or disabled.
Working with All Tokens
Users with Manage permission in User Management can view and manage the tokens of all users. To view all user tokens, select the All Tokens tab. Under Filters, you can limit your view by token owner, type (API or Session), and status (Active or Expired).
To duplicate, remove, disable, or enable a token, select it and click Actions > Duplicate, Remove, Disable, or Enable.
If the token is an API token, you can click on it to view and edit its properties and permissions. For more information, see Working with API Tokens, above.