Skip to main content
Infisical’s role-based access controls let you define predefined permission sets for users and machine identities. However, there are cases where a specific user or machine identity needs access beyond what their assigned roles provide — without creating an entirely new role. Additional Privileges let you grant scoped, fine-grained permissions to individual users or machine identities within a project. Use them when you need to:
  • Grant access to a specific secret path that the member’s current role doesn’t cover.
  • Provide temporary, time-bound access for a particular task or incident.
  • Layer extra permissions on top of existing roles without affecting other members who share those roles.
If you find yourself assigning the same additional privileges repeatedly, consider creating a custom role instead.

​
Adding Additional Privileges

Additional privileges can be configured through the Infisical Dashboard or the API. The steps below apply to both users and machine identities.
1

Select the user or machine identity

Navigate to the Access Controls page of your project and click on the user or machine identity you want to grant additional privileges to.Select a member
2

Add additional privileges

In the member detail view, click the Add Additional Privileges button. This opens a configuration panel for the new privilege.Add Additional Privileges button
3

Add policies

Click the Add Policies button to open the policy selector dropdown.Add Policies button
4

Select the policies to apply

Choose the policies you want to include in this additional privilege from the dropdown.Policy selector dropdown
5

Configure the privilege

Fill in the privilege details and configure each policy you selected:
  • Privilege Name — A slug-friendly identifier for the privilege.
  • Duration — How long the privilege remains active. Defaults to Permanent. Set a limited duration for temporary access grants.
  • Policies — The specific permission policies (e.g., read/write access to certain secret paths) included in this privilege. Configure policies
6

Save the privilege

Click Save to apply the additional privilege. It takes effect immediately.Save button
7

Verify the privilege

The new additional privilege now appears in the member’s detail page. You can edit or remove it at any time from here.Additional privilege created