Secret Scope

When you create a secret you must declare the scope of that secret. This determines who has permission to use the secret. Remember, once the secret has been added to the vault, the value itself cannot be recovered by anyone, not even the creator. The scope can be set to:

• Environment: An Environment scoped secret is a secret that any user who has access to the specific Environment can use in a blueprint. Organization users can create secrets that are bound specifically to a selected Environment.

• Organization: An Organization scoped secret is a secret that anyone in the organization can use in a blueprint. Only the organization owner has the ability to update and delete the secret.

• Team: With a team scoped secret, members of the team can use the secret in blueprints, but only the team or organization owner can update and delete the secret.

Secret Teams support is coming soon!