Since releasing our Personal Access Token (PAT) Lifecycle Management APIs<\/strong> in private preview<\/a> last month, we\u2019ve received overwhelming interest from folks who are looking for a more robust alternative to the existing UI for creating and managing their PATs.<\/p>\n This API will be of great interest to organizations who are looking to strengthen their security posture and reduce risk against potential attackers through frequent PAT rotation. Given how powerful PATs can be and the access they can grant to your Azure DevOps resources, it is good practice to rotate your PATs on a regular basis. Since PATs have an expiration date set at time of creation, it\u2019s even more critical to rotate PATs to ensure applications that are reliant on them keep running smoothly.<\/p>\n Many private preview participants have been able to leverage these APIs to set up automated pipelines for rotating soon-to-be-expired PAT tokens being used within their apps. Gone are the days of manual rotation for yours PATs every few months, phew!<\/p>\n We are happy to announce that these APIs are now available to the general audience. To learn how to use these APIs, we\u2019ve provided new public documentation<\/a> on:<\/p>\n To learn more about the API and commonly asked questions, like \u201cWhy do we need to authenticate with an AAD token<\/em>\u201d, check out the FAQ section<\/a> in the documentation.<\/p>\n We know that this has been a highly requested feature by you and your teams, so we\u2019re happy to deliver this new tool to help alleviate PAT maintenance overload and allow your teams to focus on other work that matters.<\/p>\n\n