Security & Access

Reference	What it covers
Secrets	Secret record fields, value disclosure rules, and create/update/delete lifecycle.
API keys	The API Keys tab: managed API key record fields, status values, and rotation behaviour.
Source authentication	The four ways a surface can authenticate its callers (JWT Bearer, API Key (secret store), API Key (provider), and mTLS), and where each method’s values come from.
RBAC	The Administrator, Power User, and User role ladder and the full default permission map.

Was this page helpful?

Glad to hear it. Thanks for letting us know.

Sorry to hear that. Thanks for letting us know.