# ACL, legacy config to new

**URL:** <https://discuss.hashicorp.com/t/acl-legacy-config-to-new/46742>\
**Category:** Consul\
**Created:** [November 10, 2022, 2:33pm UTC](https://discuss.hashicorp.com/t/acl-legacy-config-to-new/46742 "2022-11-10T14:33:31Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![foobar](https://avatars.discourse-cdn.com/v4/letter/f/f19dbf/32.png) [@foobar](https://discuss.hashicorp.com/u/foobar)\
**Post date:** [November 10, 2022, 2:33pm UTC](https://discuss.hashicorp.com/t/acl-legacy-config-to-new/46742/1 "2022-11-10T14:33:31Z")

</div>

Hi All, I hope you are all well.

I have a few questions regarding ACL.

1. How to quickly know if ACL token is of legacy type? Is there an identifier and can this be seen when invoking `consul acl token read -id {token_id}`?

2. In a consul (version 1.6.2) cluster where ACL got enabled by setting the legacy option `acl_datacenter`. If this will be changed to the new config below, will this impact the existing tokens?

```auto
"acl": {
  "enabled": true  
}

```

---

<div class="post-metadata">

**Author:** ![maxb](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/maxb/32/26655_2.png) [@maxb](https://discuss.hashicorp.com/u/maxb)\
**Post date:** [November 11, 2022, 4:30pm UTC](https://discuss.hashicorp.com/t/acl-legacy-config-to-new/46742/2 "2022-11-11T16:30:34Z")

</div>

> [@foobar](#):
>
> How to quickly know if ACL token is of legacy type? Is there an identifier and can this be seen when invoking `consul acl token read -id {token_id}`?

Legacy ACL tokens have rules, written in HCL, directly associated with them. Modern tokens have instead, links to policies and/or roles.

> [@foobar](#):
>
> In a consul (version 1.6.2) cluster where ACL got enabled by setting the legacy option `acl_datacenter`. If this will be changed to the new config below, will this impact the existing tokens?

As written in the documentation, you need to define `primary_datacenter` as well when migrating.