Skip to main content
You can connect to an account in your browser or with the Infisical CLI. Either way, Infisical opens a session, and a gateway supplies the account’s credential so that you never see it. Infisical records everything you do in the session.
To give an AI agent access to accounts, use infisical pam agentic access instead.

​
Prerequisites

  • The Admin, Operator, or Connector role on the account or its folder
  • An approved access request, if the account’s template requires approval
  • To connect with the CLI, the Infisical CLI installed and logged in with infisical login

​
Launch a session

1
Go to Privileged Access Management > Accounts and find the account.
2
Select the rocket icon on the account’s row.If the row shows a key icon instead, the account requires approval. Select the key icon to request access, and launch the session once an approver approves the request.
3
Select a launch method, then connect:
Select Browser, then select Connect in Browser. The session opens in a new tab.What the tab shows depends on the account type:
  • PostgreSQL, MySQL, Snowflake, and ClickHouse: a table browser and a SQL editor
  • Redis: a console for Redis commands
  • SSH: a terminal
  • Windows and Windows AD: a remote desktop
  • AWS IAM: the AWS Management Console
Only some account types support the browser.
If the account’s template requires a reason, Infisical asks for one before the session starts. If the template requires MFA, Infisical asks you to complete MFA in your browser.

​
End a session

A session ends when:
  • You close the browser tab, or press Ctrl+C in the terminal that runs the CLI
  • The session reaches the maximum duration set by the account’s template
  • Someone with the Admin role on the account or its folder terminates the session

​
Next steps

Sessions

Review and end the connections that people and agents make to your accounts.

View credentials

Reveal the password or key stored for an account.