Why Project and optionally Global token have no web API access right for components/tree?

After long time trying several requests constellations to get the components/tree list from API we found out that only User token can access that API. Why is there no access for Project token?, may be for a Global token too? Why an additional hint at the API documentation is missing that only User tokens can be used? There is word only that you need Browse right.

Hi @HBoskugelS,

To be precise, SonarQube Server doesn’t actually have “global” or “project” tokens—rather, it distinguishes between global analysis tokens and project analysis tokens. Since this API endpoint isn’t involved in the analysis process, it’s intentionally excluded.

The only token type that you can be sure has access to all the same APIs as a user is the user token.

Thanks for clarifing.