---
schema_version: "1"
id: b921a7846408fae45a1b73e3b773021691b71b63889c4427f0345d392cea1df3
title: Anypoint Platform Secrets Manager Permissions
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/anypoint-security/asm-permission-concept.md
canonical_url: https://docs.mulesoft.com/anypoint-security/asm-permission-concept
source_site: docs.mulesoft.com
content_type: documentation
content_hash: fa6fcbc4c738033d33b0f8d05726c0a8152fcf59901b958085ea9e147e5d6a24
description: MuleSoft Documentation Site
latest: true
---
---
product: Security
version: master
---

# Anypoint Platform Secrets Manager Permissions

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Organization administrators assign Secrets Manager permissions in Access Management. Each permission
applies to a specific Anypoint environment.

## User Permissions

Grant these permissions to control who can create secret groups, manage secrets, and connect
external vaults.

<table><colgroup><col> <col> <col></colgroup><thead><tr><th>Required Permissions</th><th>Grants the Ability to</th><th>Notes</th></tr></thead><tbody><tr><td><div><div><p>Grant access to secrets</p></div></div></td><td><div><div><p>Browse, read metadata and grant access to secrets in a specific environment.</p></div></div></td><td><div></div></td></tr><tr><td><div><div><p>Manage secret groups</p></div></div></td><td><div><div><ul><li><p>Create, modify, delete, read, and clone secret groups in a specific environment.</p></li><li><p>Check if the user can initiate a new clone or restore operation.</p></li></ul></div></div></td><td><div></div></td></tr><tr><td><div><div><p>Read secrets metadata</p></div></div></td><td><div><div><p>Browse and read metadata of secrets in a specific environment.</p></div></div></td><td><div></div></td></tr><tr><td><div><div><p>Write secrets</p></div></div></td><td><div><div><p>Upload, create, modify secrets in a specific environment.</p></div></div></td><td><div></div></td></tr><tr><td><div><div><p>View Vault Integrations</p></div></div></td><td><div><div><p>List and view external vault integrations and their sync activity and health checks in a specific environment.</p></div></div></td><td><div><div><p>This permission applies only to the enhanced experience.</p></div></div></td></tr><tr><td><div><div><p>Manage Vault Integrations</p></div></div></td><td><div><div><p>Create, edit, delete, test, and sync external vault integrations in a specific environment. Extends the View Vault Integrations permission.</p></div></div></td><td><div><div><p>This permission applies only to the enhanced experience.</p></div></div></td></tr></tbody></table>

## See Also

- [Secrets Manager](https://docs.mulesoft.com/anypoint-security/index-secrets-manager)

- [Secret Groups](https://docs.mulesoft.com/anypoint-security/asm-secret-group-concept)