gitlab-foss/doc/administration/credentials_inventory.md

stage, group, info, gitlab_dedicated, title

stage	group	info	gitlab_dedicated	title
Software Supply Chain Security	Authentication	To determine the technical writer assigned to the Stage/Group associated with this page, see https://handbook.gitlab.com/handbook/product/ux/technical-writing/#assignments	yes	Credentials inventory

{{< details >}}

• Tier: Ultimate
• Offering: GitLab Self-Managed, GitLab Dedicated

{{< /details >}}

{{< history >}}

• Group access tokens added in GitLab 15.6.

{{< /history >}}

{{< alert type="note" >}}

For GitLab.com, see Credentials inventory for GitLab.com.

{{< /alert >}}

Use the credentials inventory to monitor and control access to your instance.

As an administrator, you can:

• Revoke personal, project, or group access tokens.
• Delete SSH keys.
• Review credential details including:
  • Ownership.
  • Access scopes.
  • Usage patterns.
  • Expiration dates.
  • Revocation dates.

Revoke personal access tokens

To revoke a personal access token in your instance:

1. On the left sidebar, at the bottom, select Admin.
2. Select Credentials.
3. Next to the personal access token, select Revoke. If the token was previously expired or revoked, you'll see the date this happened instead.

The access token is revoked and the user is notified by email.

Revoke project or group access tokens

To revoke a project access token in your instance:

1. On the left sidebar, at the bottom, select Admin.
2. Select Credentials.
3. Select the Project and group access tokens tab.
4. Next to the project access token, select Revoke.

The access token is revoked and a background process begins to delete the associated project bot user.

Delete SSH keys

To delete an SSH key in your instance:

1. On the left sidebar, at the bottom, select Admin.
2. Select Credentials.
3. Select the SSH Keys tab.
4. Next to the SSH key, select Delete.

The SSH key is deleted and the user is notified.

View GPG keys

You can see details for each GPG key including the owner, ID, and verification status.

To view information about GPG keys in your instance:

1. On the left sidebar, at the bottom, select Admin.
2. Select Credentials.
3. Select the GPG keys tab.