By erel
My student is creating a Let’s Encrypt certificate according to this guide:
He needs a token. But I do not know what permissions exactly should I give to the token?
When I go to “Create A New Personal Access Token” I see many options in the “Custom Scopes” menu, but none of them mentions DNS or encryption.
Also, I do not see how to create an API token for a specific droplet?
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Hi there,
If you are using the new scoped API tokens, you would need the domain scope:

The domain scope gives you access to manage domain DNS records.
An alternative option is to use the full access API tokens.
Let me know if you have any questions!
- Bobby
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
Full documentation for every DigitalOcean product.
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
Stay up to date by signing up for DigitalOcean’s Infrastructure as a Newsletter.
New accounts only. By submitting your email you agree to our Privacy Policy
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.