The API token - by design - essentially has to be attached to a principal - a user. Currently, there’s no token that is able to act as a “group”-token per se. Due to this customers have to limit the amount of named service api accounts that are used for scripts as they are billed.

Especially, since other SaaS providers like Gitlab as well as Microsoft offer such functionality free of charge. As written below, Gitlab offers service tokens on a group level and Microsoft has implemented so-called “service principals”. Both are at no cost and quite flexible to use.