mirror of
https://github.com/hanzoai/kms.git
synced 2026-10-17 11:18:16 +00:00
zeekay
0ebffbd529
- Fix 381 files where branding script corrupted variable names (e.g. isHanzo KMSTemplate -> isKmsTemplate) - Rebrand from "Hanzo KMS" to just "KMS" for white-label support (allows Lux KMS, Hanzo KMS, etc. via configuration) - 856 files, purely string replacements, no logic changes
27 lines
1.1 KiB
Plaintext
27 lines
1.1 KiB
Plaintext
---
|
|
title: "Temporary Access"
|
|
description: "Learn how to set up timed access to sensitive resources for user and machine identities."
|
|
---
|
|
|
|
Certain environments and secrets are so sensitive that it is recommended to not give any user permanent access to those. For such use cases, KMS supports the functionality of **Temporary Access** provisioning.
|
|
|
|
|
|
To provision temporary access through Web UI:
|
|
1. Click on the `Edit` button next to the set of roles for user or identities.
|
|
|
|
|
|
2. Click `Permanent` next to the role or specific privilege that you want to make temporary.
|
|
|
|
3. Specify the duration of remporary access (e.g., `1m`, `2h`, `3d`).
|
|
|
|
|
|
4. Click `Grant`.
|
|
|
|
5. Click the corresponding `Save` button to enable remporary access.
|
|
|
|
|
|
<Note>
|
|
Every user and machine identity should always have at least one permanent role attached to it.
|
|
</Note>
|
|
|