Objective
This article helps you adjust what an OAuth application is allowed to access and how long the access tokens it receives remain valid.
Product
Twilio Console
Environment
Twilio Console
User Account Permission/Role(s) Required
An account role that allows you to update OAuth applications. Without it, the fields stay read-only and no Edit action is shown.
Procedure
- In the Twilio Console, select Settings in the left sidebar.
- Under Account settings, select OAuth applications.
- Select the application you want to change.
- Select the Access Settings tab. The token expiration fields and the Select OAuth Scopes grid are shown read-only.
- Select Edit.
- Update the Days, Hours, and Minutes fields to set the token expiration.
- In the permissions grid, expand a product and select or clear permissions. Use the search box to find a product or resource.
- Select Save.
- A confirmation appears saying the access settings were updated successfully, and the tab returns to read-only view.
Additional Information
- Token expiration must be between 1 minute and 30 days; other values are rejected with "Token expiration time must be between 1 minute and 30 days".
- At least one permission must remain selected. Saving with none reports "You must select at least one permission".
- If the application has no stored expiration, the fields fall back to the default of 1 hour.
- The page includes a link to learn more about what API a permission maps to.
This content was generated by AI and reviewed, edited, and verified by a human.