# GitLab Token Exipired - Cannot Be Updated **URL:** \ **Category:** SonarQube Cloud\ **Tags:** gitlab\ **Created:** [April 9, 2025, 7:22am UTC](https://community.sonarsource.com/t/gitlab-token-exipired-cannot-be-updated/138479 "2025-04-09T07:22:15Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![elvedinbabic](https://avatars.discourse-cdn.com/v4/letter/e/ac8455/32.png) [@elvedinbabic](https://community.sonarsource.com/u/elvedinbabic)\ **Post date:** [April 9, 2025, 7:22am UTC](https://community.sonarsource.com/t/gitlab-token-exipired-cannot-be-updated/138479/1 "2025-04-09T07:22:15Z")
Cannot update token for GitLab - so binding does not work ---
**Author:** ![Colin](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/colin/32/55255_2.png) [@Colin](https://community.sonarsource.com/u/Colin)\ **Post date:** [April 9, 2025, 8:21am UTC](https://community.sonarsource.com/t/gitlab-token-exipired-cannot-be-updated/138479/2 "2025-04-09T08:21:04Z")
Hey there. I just went to my org-level **Administration \> Organization settings \> Organization binding** and [bound](https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/creating-organization/binding-unbound-organization/#gitlab-group) my org with a new token. What happens when you try to update the token? ---
**Author:** ![elvedinbabic](https://avatars.discourse-cdn.com/v4/letter/e/ac8455/32.png) [@elvedinbabic](https://community.sonarsource.com/u/elvedinbabic)\ **Post date:** [April 9, 2025, 8:39am UTC](https://community.sonarsource.com/t/gitlab-token-exipired-cannot-be-updated/138479/3 "2025-04-09T08:39:32Z")
I get: Failed to get Gitlab namespace 404. I also get following when trying with new org: Missing required parameters. Provide either organizationId OR (devOpsPlatform and installationId) OR (devOpsPlatform, devOpsPlatformOrganizationId parameters and DevOps-Platform-Access-Token header). ---
**Author:** ![Colin](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/colin/32/55255_2.png) [@Colin](https://community.sonarsource.com/u/Colin)\ **Post date:** [April 9, 2025, 2:41pm UTC](https://community.sonarsource.com/t/gitlab-token-exipired-cannot-be-updated/138479/4 "2025-04-09T14:41:38Z")
Could there be some network filtering going on? > [@Unable to import Azure DevOps Organization in SonarQube Cloud](https://community.sonarsource.com/t/unable-to-import-azure-devops-organization-in-sonarqube-cloud/131974/4): > > Hello, We had a few users reporting this and it turned out to be an issue with their network policy. It was filtering the request and removing the ADO token that is passed as a header. Those use ZScaler. Do you use ZScaler or a similar network filtering solution? To confirm, can you try outside of your corporate network to validate that this is the problem? Regards, Antoine ---
**Author:** ![JackWhelpton](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/jackwhelpton/32/10505_2.png) [@JackWhelpton](https://community.sonarsource.com/u/JackWhelpton)\ **Post date:** [August 29, 2025, 12:49am UTC](https://community.sonarsource.com/t/gitlab-token-exipired-cannot-be-updated/138479/5 "2025-08-29T00:49:04Z")
Sorry to resurrect a zombie thread, but I may have a bit more info on this… we were trying to use a Personal Access Token from a GitLab Service Account (rather than a paid user seat, that also has to be updated if that user leaves etc.) and that results in this error. Using a “standard” PAT works fine. Is there a way to use access tokens tied to service accounts to configure the ALM integration? ---
**Author:** ![Colin](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/colin/32/55255_2.png) [@Colin](https://community.sonarsource.com/u/Colin)\ **Post date:** [September 1, 2025, 2:19pm UTC](https://community.sonarsource.com/t/gitlab-token-exipired-cannot-be-updated/138479/6 "2025-09-01T14:19:33Z")
Hey @JackWhelpton This error exactly? > [@elvedinbabic](#): > > Provide either organizationId OR (devOpsPlatform and installationId) OR (devOpsPlatform, devOpsPlatformOrganizationId parameters and DevOps-Platform-Access-Token header). Sounds really weird if so. Are tokens generated by the access account in a different format than the “standard” ones? A different prefix or something? ---
**Author:** ![hsb-guido](https://avatars.discourse-cdn.com/v4/letter/h/e19adc/32.png) [@hsb-guido](https://community.sonarsource.com/u/hsb-guido)\ **Post date:** [November 13, 2025, 8:10am UTC](https://community.sonarsource.com/t/gitlab-token-exipired-cannot-be-updated/138479/7 "2025-11-13T08:10:51Z")
I ran into the same issue today. Similar to what Jack Whelpton experienced. Previously, I used a Gitlab Group Access Token. I tried to move to a Service Account Access token instead and failed to update the Access Token in Sonarcloud. My issue is solved by explicitly giving the Service Account permissions to the relevant Gitlab Group(s). Apparently, the Service Account has no permissions, even if it’s created within a Gitlab group. ---
**Author:** ![JackWhelpton](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/jackwhelpton/32/10505_2.png) [@JackWhelpton](https://community.sonarsource.com/u/JackWhelpton)\ **Post date:** [December 13, 2025, 6:15pm UTC](https://community.sonarsource.com/t/gitlab-token-exipired-cannot-be-updated/138479/8 "2025-12-13T18:15:05Z")
Thanks @hsb-guido , that was exactly the problem! I think I’d tacitly assumed the service account would pick up some default permissions, but it makes sense that should be managed using the same path as for non-SA users.