[v4] User Guide: API token documentation

docs/user-docs/latest/settings/managing-global-settings.md

@@ -51,3 +51,38 @@ To add a new locale:
 3. (optional) In the *Locale display name* textbox, write a new display name for your new locale.
 4. (optional) In the Advanced settings tab, tick the *Set as default locale* setting to make your new locale the default one for your Strapi application.
 5. Click on the **Add locale** button to confirm the addition of your new locale.
+
+## Managing API tokens
+
+API tokens allow users to authenticate their Content API queries (see Developer Documentation). Administrators can manage API tokens through the *Global settings > API Tokens* sub-section of the settings interface.
+
+<!-- screenshot -->
+
+The *API Tokens* settings sub-section displays a table listing all created API tokens.
+
+For each API token, the table displays its name, description, type and date of creation. From the table, administrators can also:
+
+- Click on the edit button <!-- icon --> to edit an API token's name, description or type
+- Click on the delete button <!-- icon --> to delete an API token
+
+### Creating a new API token
+
+All API tokens created by administrators of the Strapi application are permanent tokens that cannot be regenerated.
+
+To create a new API token:
+
+1. Click on the **Add new entry** button.
+2. In the API token edition interface, configure the new API token:
+
+| Setting name | Instructions                                              |
+|--------------|-----------------------------------------------------------|
+| Name         | Write the name of the API token.                          |
+| Description  | (optional) Write a description for the API token.         |
+| Token type   | Choose a token type: either *Read-only* or *Full access*. |
+
+3. Click on the **Save** button. The new API token will be displayed at the top of the interface, along with a copy button <!-- icon -->.
+
+::: caution
+For security reasons, API tokens are only shown right after they have been created. When refreshing the page or navigating elsewhere in the admin panel, the newly created API token will be hidden and will not be displayed again.
+:::
+

docs/user-docs/latest/users-roles-permissions/configuring-administrator-roles.md

@@ -135,6 +135,7 @@ Settings permissions can be configured for all settings accessible from *General
 | Plugins and Marketplace | <ul><li>Marketplace</li><ul><li>"Access the Marketplace" - gives access to the Marketplace</li></ul></ul><ul><li>Plugins</li><ul><li>"Install (only for dev env)" - allows to install new plugins when in a development environment</li><li>"Uninstall (only for dev env)" - allows to uninstall plugins when in a development environment</li></ul></ul> |    
 | Webhooks | <ul><li>General</li><ul><li>"Create" - allows to create webhooks</li><li>"Read" - allows to see created webhooks</li><li>"Update" - allows to edit webhooks</li><li>"Delete" - allows to delete webhooks</li></ul></ul> 👉 Path reminder to Webhook settings: <br> *General > Settings > Global Settings - Webhook* |
 | Users and Roles | <ul><li>Users</li><ul><li>"Create (invite)" - allows to create administrator accounts</li><li>"Read" - allows to see existing administrator accounts</li><li>"Update" - allows to edit administrator accounts</li><li>"Delete" - allows to delete administrator accounts</li></ul></ul><ul><li>Roles</li><ul><li>"Create" - allows to create administrator roles</li><li>"Read" - allows to see created administrator roles</li><li>"Update" - allows to edit administrator roles</li><li>"Delete" - allows to delete administrator roles</li></ul></ul> 👉 Path reminder to the RBAC feature: <br> *General > Settings > Administration Panel* |
+| API tokens | <ul><li>General</li><ul><li>"Create (generate)" - allows to create API tokens</li><li>"Read" - allows to see created API tokens</li><li>"Update" - allows to edit API tokens' settings</li><li>"Delete" - allows to delete API tokens</li></ul></ul> 👉 Path reminder to API tokens settings: <br> *General > Settings > Global Settings - API Tokens* |
 
 :::