Access Tokens

What this page is for

This page explains how token mode works and when it is the right choice instead of a saved connection.

When to use it

Use token mode when:

• you want a one-off review
• you do not want to save reusable Azure access yet
• the fastest path to a first successful scan matters more than long-term convenience

How to use it

1. Choose Paste Access Token in the review modal.
2. Paste a token for the Azure Management API.
3. Let Hygiara validate the token against Azure.
4. Continue through the remaining steps and queue the review.

What token you need

The token must be valid for:

https://management.azure.com/

You can obtain one with:

az account get-access-token --resource https://management.azure.com --query accessToken -o tsv

or:

(Get-AzAccessToken -ResourceUrl https://management.azure.com).Token

What to expect

Token mode behaves differently from saved-connection mode:

• Hygiara validates the token before you can continue
• all subscriptions visible to that token are included automatically
• there is no separate subscriptions step

Common mistakes

• using a token for the wrong audience
• pasting an expired token
• expecting token mode to behave like stored-credential mode

Next step

• Choosing authentication
• Creating a review