Hello,

The PAT is an authentication credential for your service principal; authorization is evaluated at request time based on the current permissions of that principal (and token permissions, if enabled), not the moment the token was created.
So if you only extended the service principal’s permissions (for example, more workspace / UC privileges), you do not need to re‑generate the PAT. As long as the token is still valid and the SP still has permission to use tokens, the existing PAT will pick up the new permissions automatically.
The only time you’d need a new token is if the old one was revoked, expired, or the principal temporarily lost “CAN USE” token permission (in which case tokens become unusable until that permission is restored).