Does Panther delete a user's API tokens when they are removed from the Panther instance?

QUESTION

Will Panther API tokens get deleted if the user that generated them is removed from the Panther instance?

ANSWER

When a Panther user generates an API token for the Panther instance and is subsequently removed, the API token will not be deleted automatically. If you need to remove an API token, you can manually delete it through the Panther Console or by rotating it.

In general, it is recommended to rotate API token keys regularly to enhance security and prevent unauthorized access. By rotating the API token, the previous one will become invalid, ensuring that only the new token can be used to access the Panther instance.