Published on: May 7, 2026 3 min read Explore tokens that carry only the permissions they need, and nothing more. Then join the beta program. Personal access tokens (PATs) authenticate most of the automation that runs in GitLab. When a token is issued with a broad scope like api or read_api , it extends permissions across many projects and groups. Fine-grained permissions for PATs, now in beta, let...