Generating FortiDLP API access tokens

When generating an API access token, you must assign a role. A role represents a predefined set of permissions that specify the endpoints accessible with that token. To save you time, FortiDLP provides various built-in roles that have been preallocated permissions based on the principle of least privilege. Alternatively, you can use a custom role. For more information, see Operator roles.

An access token's expiry is configurable. When creating an access token, Fortinet recommends that it is scoped to a specific task and is set to expire when the task is completed.

After you create your token, you must send it in the Authorization header each time you make a request.

How to generate a FortiDLP API access token

1. In the FortiDLP Console, on the left-hand sidebar, click .
2. Under Authentication, select the Access tokens tab.
3. In the Name field, type a name to identify the token.
4. In the Role menu, select the appropriate built-in or custom role.
5. In the Duration (days) field, type the number of days for the access token to be valid.
6. Click Create.

The access token displays.

The token will only display once. Ensure you save a copy of it for future reference.