Credentials inventory for GitLab.com

  • Tier: Ultimate
  • Offering: GitLab.com
History

For GitLab Self-Managed, see Credentials inventory for GitLab Self-Managed.

Use the credentials inventory to monitor and control access to your groups and projects for GitLab.com.

As the Owner for a top-level group, you can:

  • Revoke personal access tokens.
  • Delete SSH keys.
  • Review credential details for your enterprise users including:
    • Ownership.
    • Access scopes.
    • Usage patterns.
    • Expiration dates.
    • Revocation dates.

Revoke personal access tokens

To revoke personal access tokens for enterprise users in your group:

  1. On the left sidebar, select Secure.
  2. Select Credentials.
  3. Next to the personal access token, select Revoke. If the token was previously expired or revoked, you’ll see the date this happened instead.

The access token is revoked and the user is notified by email.

Delete SSH keys

To delete SSH keys for enterprise users in your group:

  1. On the left sidebar, select Secure.
  2. Select Credentials.
  3. Select the SSH Keys tab.
  4. Next to the SSH key, select Delete.

The SSH key is deleted and the user is notified.

Revoke project or group access tokens

You cannot view or revoke project or group access tokens using the credentials inventory on GitLab.com. Issue 498333 proposes to add this feature.