Extend Access Token expiration for permanent integrations

1

It seems the max age for PATs on Dremio Cloud is 180 days. We are going to have a lot of different clients pointing at Dremio, and it seems like we are going to have a twice-a-year-scramble to renew all those PATs since, for example, we have separate Superset sites for each project team, each using their own Dremio account so as to limit what they can see in the Dremio data sources and catalogs. Out of the gate, that’s 16 different user accounts on 16*2 different client platforms, plus any Tableau/PowerBI/[other client]. And then we will have our automation accounts.

I suppose we could create tooling to leverage APIs for each platform and system. But it seems having extended PAT expriation times would be a viable alternative. I’m thinking of 2 year expirations like in Azure for some things.

Any chance you could extend the available PAT expiration times up to 720 days from 180?

2

Great timing Josh @capnjosh I was going to raise a related question for Dremio Experts here - my question being based on assumption that one can create PATs with validity from 30 days to 180 days (as also mentioned by Josh). My questions being:

  1. Is there an API to renew/extend the token. I didn’t seem to locate that in API reference. I believe that would be pre-requisite to any custom tooling to automatically extend.
  2. If there is no way to extend, what is the guidance then if we configure an application to use 180 day token - Generate a brand new token every 180 days and replace it wherever it is used in application?
3

@capnjosh Currently 180 days is the max

@rdkworld API PAT management is a backlog feature