Anypoint Platform Secrets Manager Permissions

Organization administrators assign Secrets Manager permissions in Access Management. Each permission applies to a specific Anypoint environment.

User Permissions

Grant these permissions to control who can create secret groups, manage secrets, and connect external vaults.

Required Permissions	Grants the Ability to	Notes
Grant access to secrets	Browse, read metadata and grant access to secrets in a specific environment.
Manage secret groups	Create, modify, delete, read, and clone secret groups in a specific environment. Check if the user can initiate a new clone or restore operation.
Read secrets metadata	Browse and read metadata of secrets in a specific environment.
Write secrets	Upload, create, modify secrets in a specific environment.
View Vault Integrations	List and view external vault integrations and their sync activity and health checks in a specific environment.	This permission applies only to the enhanced experience.
Manage Vault Integrations	Create, edit, delete, test, and sync external vault integrations in a specific environment. Extends the View Vault Integrations permission.	This permission applies only to the enhanced experience.

Required Permissions

Grants the Ability to

Notes

Grant access to secrets

Browse, read metadata and grant access to secrets in a specific environment.

Manage secret groups

Create, modify, delete, read, and clone secret groups in a specific environment.
Check if the user can initiate a new clone or restore operation.

Read secrets metadata

Browse and read metadata of secrets in a specific environment.

Write secrets

Upload, create, modify secrets in a specific environment.

View Vault Integrations

List and view external vault integrations and their sync activity and health checks in a specific environment.

This permission applies only to the enhanced experience.

Manage Vault Integrations

Create, edit, delete, test, and sync external vault integrations in a specific environment. Extends the View Vault Integrations permission.

This permission applies only to the enhanced experience.