Manage an account

After you add an account, you can change its connection details and credentials, move it to another folder, give people access to it, override its template’s settings, or delete it.

​

Prerequisites

• The Admin role on the account or its folder

​

Open an account’s settings

Go to Privileged Access Management > Accounts, open the options menu on the account’s row, and select Configure. Selecting the row itself launches a session or opens an access request. The account’s settings have the following tabs:

​

Edit the account

On the Configuration tab, change the fields you need, then select Save Changes. Infisical keeps the stored password or key unless you enter a new one. If you change the connection details, credentials, gateway, or template, Infisical tests the connection before it saves the account. If the test fails, Infisical doesn’t save the change, and the error says why.

​

Move the account to another folder

To move the account, select a different Folder. You need the Admin role on the destination folder too. People who had access through the old folder lose it, and people with a role on the new folder get access.

​

Change the template

To change the rules for the account’s sessions, select a different Template of the same account type. Only product admins can change an account’s template. You can’t change an account’s type. To use a different type, add a new account.

​

Change the host, username, or gateway

If you change the account’s host, port, username, authentication method, or gateway, Infisical clears the account’s rotation account, so the account doesn’t rotate until you set one again. Changing the host, port, authentication method, or gateway also has these effects:

• Any other account that used this account as its rotation account loses it
• If you changed the host or gateway and can’t view the account’s credentials, Infisical pauses credential health checks on the account

​

Grant access to one account

A role on a folder applies to every account in the folder. To give a user, group, or machine identity access to one account only, assign them a role on the account: To change a member’s role, open the options menu on their row and select Edit. You can’t change an expiry, so to change one, remove the member and assign them again. The Inherited Permissions section lists the members who have access through the account’s folder. To change their access, go to the folder’s Permissions tab. To learn what each role allows, see Access control.

​

Override the template’s settings

The account’s template sets its gateway and, for Windows and Windows AD accounts, where Infisical stores its session recordings. To use a different setting for this account only, go to the Advanced tab and select Override next to the setting:

• Gateway: Select a different gateway or gateway pool (every account type except AWS IAM)
• Recording Settings: Select a different bucket for this account’s recordings (Windows and Windows AD accounts only, and only if the template’s Storage backend is S3 Bucket), as described in External storage

Select Save Changes. To go back to the template’s setting, select Remove Override.

​

Delete an account

When you delete an account, Infisical does the following:

• Ends every active session on the account
• Cancels pending access requests for the account, and revokes approved ones
• Removes the account’s direct memberships

Infisical keeps the account’s past sessions and recordings, but only product admins can view them. You can’t delete an account in these cases:

• The account is the rotation account of another account (set a different rotation account on the other account first)
• The account is the credential for a discovery source (change the source’s credential, or delete the source, first)

​

Next steps