Credential profiles in documentation
Encrypted, role-gated, audited secret handling for customer documentation — and why values are never imported.
Updated Sep 2, 2026Product 2026.94 minMSP operator, Internal IT
Model
A credential profile stores metadata (name, kind, username, URL, rotation and expiry dates, allowed roles) that anyone with read access to the customer can see. The value is encrypted with AES-256-GCM using a server-held key and lives in a table the browser can never query. Reveal is a server call that checks your role, requires a justification when the profile says so, writes the access log first, and returns the value for 30 seconds.
Imports from IT Glue or Hudu create credential profiles from password metadata only. Values are never read from exports; set them explicitly or point the profile at an external vault reference.
Was this helpful?