Credentials inventory for GitLab Self-Managed

Use the credentials inventory to monitor and control access to your GitLab Self-Managed instance.

As an administrator, you can:

• Revoke personal, project, or group access tokens.
• Delete SSH keys.
• Review credential details including:
  • Ownership.
  • Access scopes.
  • Usage patterns.
  • Expiration dates.
  • Revocation dates.

Revoke personal access tokens

To revoke a personal access token in your instance:

1. On the left sidebar, at the bottom, select Admin.
2. Select Credentials.
3. Next to the personal access token, select Revoke. If the token was previously expired or revoked, you’ll see the date this happened instead.

The access token is revoked and the user is notified by email.

Revoke project or group access tokens

To revoke a project access token in your instance:

1. On the left sidebar, at the bottom, select Admin.
2. Select Credentials.
3. Select the Project and group access tokens tab.
4. Next to the project access token, select Revoke.

The access token is revoked and a background process begins to delete the associated project bot user.

Delete SSH keys

To delete an SSH key in your instance:

1. On the left sidebar, at the bottom, select Admin.
2. Select Credentials.
3. Select the SSH Keys tab.
4. Next to the SSH key, select Delete.

The SSH key is deleted and the user is notified.

View GPG keys

You can see details for each GPG key including the owner, ID, and verification status.

To view information about GPG keys in your instance:

1. On the left sidebar, at the bottom, select Admin.
2. Select Credentials.
3. Select the GPG Keys tab.