Navigation
Vault access. Public access is not open. This product is separate from initial Identity and Apparatus access.
Screenshots use fictional demonstration accounts. Your data and available actions may differ. Reviewed October 16, 2026.
Concepts
Understand Vault records and access
A credential combines a discoverable metadata record with an encrypted value. A workspace owns it. A person or service identity needs permission to discover and use it. A lease authorizes one time-limited read.
Follow the normal flow
- Find a permitted record by name, folder or key.
- Check its environment and type before requesting its value.
- Obtain an attributed lease for the approved use.
- Redeem it once and keep the result inside the intended consumer.
- Review the resulting activity when investigating a problem.
Credential metadata explains what is visible without a secret read. Tenant isolation explains workspace boundaries. Leases explains expiry and revocation. Sharing explains how roles and grants combine.
Screen reference
