Access control
  • 2 minutes to read
  • Dark
  • PDF

Access control

  • Dark
  • PDF

Article Summary

Access groups

You can control access to applications, authorizations, secrets, and variables in this access group.

Create Access Group in DevOps Secret Manager

  1. Go to DevOps Secret Manager ➔ Access control ➔ Access Group

  2. Click on New Group in the Actions menu

Settings tab


  • Access group name*: Set a name to identify the access group

  • Active*: Indicates if the group will be active in senhasegura

  • Description: add a description of the access group

Secrets view configuration

  • Users can view secrets: Check if users in this access group have permission to view secrets

  • Require justification: Check if the user needs to justify an action

  • Requires Approval: Check whether approval is required to authorize the action

  • Approval in levels: Check if senhasegura will result in approvals by level by measure granted.

  • task trials: Set the number of visual proofs to perform tasks

  • Mandatory to specify the governance code when justifying?*: Set the filling in of the governance code is mandatory

  • Possible disapprovals for termination: The number of disapprovals offered for the execution to be canceled

  • Always add the mandatory manager to approved users?*: Define whether the manager will be added to approved users

Criteria tab


You can use the wildcard [#username#], which will be replaced by the username during the access processing.


  • Application name (comma-separated): Fill in the application names separated by a comma
  • Application Tags (comma-separated): Fill in the Application Tags, separating them with a comma
  • Business Line: Check the Main Business option if applicable to your access group
  • Type: Set the sector of the access group Business, DevOps and Security


  • systems (comma-separated): Fill in the systems that you want to authorize for this access group
  • environments (comma-separated): Fill in the environments you want to authorize for this access group

Access will only be granted to authorization belonging to applications granted by the applicable rules of this access group.


  • Name of secrets (comma-separated): Name given to the secret that was created
  • Secret environments (comma-separated): Location where the secret is stored
  • Secret tags (comma-separated): Tags used for secret segregation

Access will only be granted to secrets that:

  • Do not belong to any authorization
  • Belong to the authorization granted by the authorization rules of this access group
Users tab


In the Users tab, add the users who will be part of this access group.

Approvers tab


On the Approvers tab, add the approving users who will be part of this access group.

  1. Click Save after filling in all required information

My requests

Group members who need approval for their activities to monitor the status of the requested approval, go to the menu: DevOps Secret Manager ➔ Access Control ➔ My Requests

The report displays the requests made by the user and whether they have already been: approved, are still pending, rejected, expired, or canceled. To learn more about requests, click the request's action button. 

My approvals

Approved users will be able to view a report on their approvals and access the menu: DevOps Secret Manager ➔ Access Control ➔ My Approvals

This screen shows user approvals such as status, requester, reason, and validity, allowing the administrator to increase the access time. If it is pending approval, you can approve or disapprove a request using the Approve and Disapprove buttons. To learn more about requests, click the request's action button.

Was this article helpful?

What's Next