Access tokens

Access tokens allow collectors to authenticate with Fleet Management. You’ll create one and add it to your collector configuration.

How it works

An access policy defines what a token can do: what it can read, what it can write, and which services it can access. An access token is a credential generated from that policy.

Think of it like a keycard. The policy says “this card opens the Fleet Management door,” and the token is the actual card the collector carries.

To connect a collector, you create an access policy with the right scopes, generate a token from it, and add that token to the local configuration of the collector or OpAMP Supervisor. When the collector starts, it uses the token to authenticate with Fleet Management and register itself in your inventory.

Required scopes

Where the token goes

Copy

remotecfg {
    url = "https://fleet-management-<CLUSTER>.grafana.net/"
    basic_auth {
        username = "<INSTANCE_ID>"
        password = "<YOUR_ACCESS_TOKEN>"  // ← token goes here
    }
}

In the path, you’ll create an access token and use it to register your Alloy collector.