Restricting access by personal access tokens
Organization owners can prevent personal access tokens from accessing resources owned by the organization with the following options:
Setting a personal access token policy for your organization
Organization owners can control access to resources by applying policies to personal access tokens