### Background In 17.9, we released the [experimental phase](https://gitlab.com/groups/gitlab-org/-/epics/15234) of granular permissions for job tokens. This allows granular control of access to resources in projects with a job token. The Authorization team is interested in your feedback on: * General workflow to enable job token permissions. * Onboarding an existing project to reduce the scope of access. * Permission requests as we look to [expand access to other resources](https://gitlab.com/groups/gitlab-org/-/epics/6310). [Documentation for fine-grained permissions for job tokens](https://docs.gitlab.com/ee/ci/jobs/fine_grained_permissions.html) ### **Current State** Fine-grained permissions for job tokens are GA as of 18.3. We are currently [expanding access for job tokens](https://gitlab.com/groups/gitlab-org/-/epics/6310) so you can switch from long-lived tokens to job tokens. ###