Returns a short-lived token for the authenticated caller, carrying that caller's own permissions. The token identifies the caller and holds no authorization grants of its own: every request made with it is authorized against the caller's identity at the time of that request. Requires the securityadmin.temptoken.create permission. A temporary token cannot be used to issue another one, and one cannot be issued on behalf of another user.
Requested lifetime in seconds. Optional; the tenant's configured lifetime is used when absent.
The schema maximum is the platform ceiling, not the effective limit. The effective limit is the tenant's configured maximum, which is lower, so a request that satisfies this schema can still be rejected with 400. The error names the maximum that applies; read it from there rather than assuming the schema value.
Expiry is enforced to within about a minute, so a lifetime shorter than that is granted as requested but a token already in use may continue to be accepted briefly after it expires.
Temporary token issued
The token, returned once and not retrievable afterwards.
When the token expires.
The requested duration exceeds the tenant's configured maximum or the 24-hour platform limit, or is otherwise not a valid duration
Unauthorized
The caller is not permitted to issue a temporary token, presented a temporary token, or is acting on behalf of another user