# Bitbucket adds scoped build tokens and sets permission migration deadlines

_Published Wednesday, November 4, 2026 at 12:44 PM EST · Security, Products · Latest · Tier 2 — Notable_

Atlassian has introduced granular permissions for individual Bitbucket Pipelines steps and short-lived tokens confined to each build container. Repository administrators can also authorize pipelines from selected source branches to push to restricted branches.

On November 30, 2026, adding the workspace user to branch restrictions will stop authorizing pipeline pushes; administrators must explicitly allow the source branch instead. On April 30, 2027, steps without an explicit permissions block will lose broad default access, retaining only Git read access when cloning is enabled. Self-hosted runners require version 6.1.0 or later to use the new features.

## Sources

- [Inside Atlassian](https://www.atlassian.com/blog/bitbucket/more-control-over-permissions-in-bitbucket-pipelines-new-features-and-upcoming-changes)

---
Canonical: https://techandbusiness.org/newswire/TBH-7k5w7b-7jG7lv7dMd7
Published: 2026-11-04T17:44:23.634Z
Story chronology: 2026-11-04T16:56:28.000Z
Retrieved: 2026-11-04T22:04:43.993Z
Publisher: Tech & Business (techandbusiness.org)