ANT PAM documentation and knowledge base

There are two sets of authorisations in the Secrets area. The first relates to work with folders and the second relates to work with specific Secrets. Permissions can be defined for both a user and a group of users.

Permissions for Secrets can be set specifically on the Secrets themselves, but also on the folder in which the secrets are stored, with permissions on secrets being inherited from that folder.

Example:

User can share specific Secret from his personal folder:

It is not possible to adjust permissions on the personal folders but owner can adjust permissions on the Secret to grant access to another user:

1. open the detail of the Secret
2. go for the Sharing permissions tab and press button [+]
3. select the user who is going to have access to the Secret
4. select level of permissions for the user (see bellow): USE for possibility to use the password within the Connections, VIEW_PASSWORD for possibility to view the hidden password or just READ to display non-sensitive data stored in the Secret (except password)
5. save the permissions

Now the user is going to see this Secret in the Shared with me tab on the Secrets - he can't access the Secret from the Folders tree because he doesn't have access to the folder, but he can access the Secret via Shared with me tab. The same process works for granting access for members of any group - just select a group instead of a user.

For related privileges see Privileges and Permissions chapter.