Who can use this feature?
π€ Organizations Owners, Admins, and custom roles with the "Create Access Tokens" permission.
π© Available on the Essential, Classroom Pro, and Enterprise Plans.
Understanding Access Tokens
Access tokens allow you to authenticate with ArborXR's APIs and developer tools. Depending on which API you are using, you will use either an Organization Access Token or a Personal Access Token.
Token Type | Compatible APIs | Scope & Security |
Personal Access Token | User-based: Linked to your specific user account and role permissions. | |
Organization Access Token | Org-based: Provides broad access at the organization level. |
The Shift to Personal Access Tokens (v3)
With the launch of Public API v3, ArborXR is moving toward user-based scoping. This shift provides two critical improvements to your organization's security posture:
Granular Access Control: API capabilities are now strictly tied to your user role. If a user does not have permission to perform an action in the ArborXR web portal, they cannot perform it via the API.
Enhanced Audit Transparency: Every programmatic action is now linked to a specific user email in the Audit Log. This provides full visibility into exactly "who did what and when," even for automated tasks.


