Internal users

GitLab uses internal users (sometimes referred to as “bots”) to perform actions or functions that cannot be attributed to a regular user.

These users are created programmatically throughout the codebase itself when necessary, and do not count towards a license limit.

They are used when a traditional user account would not be applicable, for example when generating alerts or automatic review feedback.

Technically, an internal user is a type of user, but they have reduced access and a very specific purpose. They cannot be used for regular user actions, such as authentication or API requests.

They have email addresses and names which can be attributed to any actions they perform.

For example, when we migrated GitLab Snippets to Versioned Snippets we used an internal user to attribute the authorship of snippets to itself when a snippet’s author wasn’t available for creating repository commits, such as when the user has been disabled, so the Migration Bot was used instead.

For this bot:

• The name was set to GitLab Migration Bot.
• The email was set to noreply+gitlab-migration-bot@{instance host}.

Other examples of internal users:

• GitLab Admin Bot
• GitLab Automation Bot
• Alert Bot
• Ghost User
• Support Bot
• Visual Review Bot
• Resource access tokens, including:
  • Project access tokens.
  • Group access tokens.

  These are implemented as project_{project_id}_bot_{random_string} and group_{group_id}_bot_{random_string} users, with a PersonalAccessToken.