Add Values to account-level User Access Tokens Report

Problem statement:

The current account-level User Access Tokens report within Canvas lacks essential metadata which impairs an administrators' ability to monitor and manage user-generated tokens. Many tokens have no EXPIRATION or LAST_USED value. The absence of a CREATION_DATE means there is no reliable way to distinguish among tokens that were created long ago and abandoned or recently created but not acted on. Without CREATION_DATE, administrators cannot detect spikes in token generation. The LAST_USED value is an inadequate proxy for monitoring. Without PURPOSE, STATUS or TOKEN_ID values, administrators cannot easily distinguish among a single user's tokens. If a user has multiple tokens, the current report cannot differentiate which token is tied to which specific use case, even though PURPOSE is now required upon creation. When the report includes deleted/concluded objects, there is no STATUS value to distinguish between active and deleted tokens.

Proposed solution:

Add fields to the account-level User Access Tokens report. CREATION_DATE: The date and time the token was created. STATUS: A field indicating the current state of the token (Active, Deleted, etc). PURPOSE: The user-provided description of the token's intended use. TOKEN_ID AND/OR HINT: A unique value that is visible in both the report and the Canvas UI/API. There is a similar idea in the community but the platform does not currently support up votes or comments. https://community.canvaslms.com/t5/Canvas-Ideas/Reports-Add-date-created-to-User-access-tokens-repor...

User role(s):

admin

1 Comment
ModeratorPanda
Community Team
Community Team
Status changed to: Will Not Consider

Thank you for your suggestion. Please take a look at this announcement in the product blog, which may help with the interests you identified:

Strengthening Security in Canvas: Updates to User Access Token Management 

You can ask questions and comment on that blog entry, where other users have already engaged.

To help our Product Teams evaluate new ideas, this thread has been moved to our Will Not Consider status.