Skip to main content
User identities can have metadata attributes assigned directly. These attributes (such as location or department) are used to define dynamic access policies.

​
Setting metadata on users

1

Open a user

In the organization sidebar, select Access Control, select Users, then select a user.
2

Open the user editor

Select Options, then select Edit User.
3

Add metadata

Select Add Key, enter the metadata key-value pair, then select Update.

​
Applying ABAC policies with user metadata

Attribute-based access controls are currently only available for policies defined on Secrets Manager projects. You can set ABAC permissions to dynamically set access to environments, folders, secrets, and secret tags. In your policies, metadata values are accessed as follows:
  • User ID: {{ identity.id }} (always available)
  • Username: {{ identity.username }} (always available)
  • Metadata Attributes: {{ identity.metadata.<metadata-key-name> }} (available if set)