Credential Access Control
Limit who can see, use or manage a single credential.
By default, anyone on your team with access to the vault can use a credential. You can restrict a single credential to named people.
Restrict a credential
- Open the credential.
- Go to the Access tab.
- Add a person and choose their level.
As soon as the first person is added, the credential is restricted to the people on the list. Administrators can always reach it.
Levels
- View. See that the credential exists and its non-secret details.
- Reveal. Reveal and copy the secret.
- Manage. Edit, share, change access and delete.
Each level includes the ones above it.
Remove a restriction
Remove every person from the Access tab and the credential goes back to the default.
Find restricted credentials
The Restricted access smart view lists every credential with its own access list.
What is recorded
Every access change is recorded on the credential's Activity tab with who made it.
Was this article helpful?