Credential Access Control (ACLs)
Restrict which users or roles can view or edit each credential.
Credential Access Control
- Open the credential and click Access Control.
- Toggle Restrict access on.
- Add users or roles with View (can reveal) or Edit (can update) permission.
- Click Save.
Users not on the ACL see the credential name but cannot reveal the secret. Go to Settings → Credentials Vault → Default Permissions to set role-level defaults.
Every reveal, edit, and share is logged in the Activity tab in Credentials Vault.
Where to go next
- Understand the whole module → Add a Credential to the Vault
- Next in this module → One-Time Share Links
- See where this fits in the bigger picture → How a Device Problem Becomes a Fix
Was this article helpful?