{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-guides/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["partial","admonition"]},"type":"markdown"},"seo":{"title":"Organization Tokens","siteUrl":"https://docs.synqly.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"organization-access-tokens","__idx":0},"children":["Organization Access Tokens"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Organization Access Tokens"]}," authenticate the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Management APIs"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use these for administrative work:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Create and configure Accounts"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Set up and modify Integrations"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Manage Members and access policies"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Configure Integration Points"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This token carries broad organizational authority and operates at the management layer."," ","Treat it like a service account credential — store it securely, never expose it in client code."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"scope-and-authority","__idx":1},"children":["Scope and Authority"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Organization Access Tokens grant access to the Management APIs, which control the full lifecycle"," ","of Synqly resources within your Organization. Any operation that creates, modifies, or deletes"," ","Accounts, Integrations, Integration Points, or Members requires this token."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"API"},"children":["API"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Token required"},"children":["Token required"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Used for"},"children":["Used for"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Management APIs"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Organization Access Token"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Create and configure Synqly resources"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Connector APIs"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Integration Access Token"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Interact with external providers"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"why-two-token-types","__idx":2},"children":["Why Two Token Types?"]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Separation of authority"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Without this separation, a runtime integration could gain administrative access, and"," ","provider-facing operations could modify organization-level resources. Synqly enforces"," ","least-privilege by design: management authority and operational execution are always isolated."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use Organization Access Tokens only where administrative operations are required. For runtime"," ","provider interactions, use Integration Access Tokens instead."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To understand how tokens are scoped through roles, permission sets, and resource restrictions, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/security-model"},"children":["Security Model"]},"."]}]},"headings":[{"value":"Organization Access Tokens","id":"organization-access-tokens","depth":1},{"value":"Scope and Authority","id":"scope-and-authority","depth":2},{"value":"Why Two Token Types?","id":"why-two-token-types","depth":2}],"frontmatter":{"slug":"guides/concepts/organization-access-tokens","pagination":false,"seo":{"title":"Organization Tokens"}},"lastModified":"2026-07-09T05:15:58.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/concepts/organization-access-tokens","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}