Mint Global Admin Token

Mint a global-admin token. Only an existing global admin (or break-glass) may mint one — tenant admins (incl. the default/home admin) cannot. The first-run bootstrap mints the initial global admin; break-glass is the ultimate recovery. Returns the plaintext once; only the hash is stored.

#1114 (owner default A): a listed person's elevated browser SESSION may not mint one: a lasting global-admin token would outlive the 12 h elevation and the session itself. Minting stays behind a pasted global-admin token or break-glass (require_global_admin_token: 403, details.reason = pasted_token_required, audited).

post/global-admin/tokens

Request

  • Base URL: https://api-docs.session-exchange.com (the document declares no server; this is the origin it was published from)
  • URL: https://api-docs.session-exchange.com/global-admin/tokens
  • Auth: none declared

Request body

labelstring
owner_idstring
user_idstring

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 2 revisions of this API.