Security & Access

Reference	What it covers
Secrets	Secret record fields, value disclosure rules, and create/update/delete lifecycle.
API keys	The API Keys tab: managed API key record fields, status values, and rotation behaviour.
Source authentication	The four ways a surface can authenticate its callers (JWT Bearer, API Key (secret store), API Key (provider), and mTLS), and where each method’s values come from.
RBAC	The Administrator, Power User, and User role ladder and the full default permission map.

Was this page helpful?

Glad to hear it! Please tell us how we can improve more.

Sorry to hear that. Please tell us how we can improve.

Thank you for sharing your feedback so we can improve your experience.