mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-09-22 13:39:35 +00:00
30 lines
2.2 KiB
Plaintext
30 lines
2.2 KiB
Plaintext
---
|
|
title: "Platform Identity and Access Management"
|
|
sidebarTitle: "Platform IAM"
|
|
description: "Understand how users, machine identities, roles, and permissions are managed."
|
|
---
|
|
|
|
Infisical uses identity-based access control to govern how users and systems interact with secrets, certificates, infrastructure, and other resources on the platform.
|
|
|
|
There are two types of identities:
|
|
|
|
- [User identities](/documentation/platform/identities/user-identities): Represent individuals such as developers or administrators that typically access the platform via browser.
|
|
|
|
- [Machine identities](/documentation/platform/identities/machine-identities): Represent systems such as CI pipelines or applications that programmatically interact with the platform.
|
|
|
|
Each identity is granted access based on its assigned roles and permissions and must authenticate with the platform in order to access any resources.
|
|
|
|
To learn more, refer to the [identities documentation](/documentation/platform/identities/overview).
|
|
|
|
## Roles and Access
|
|
|
|
Infisical provides a robust and flexible access control system. The primary authorization mechanism is [role-based access control (RBAC)](/documentation/platform/access-controls/role-based-access-controls), where identities are assigned roles at two access control levels:
|
|
|
|
- [Organization-level access control](/documentation/platform/access-controls/role-based-access-controls#organization-level-access-controls): Control billing, member management, and platform-wide settings
|
|
|
|
- [Project-level access control](/documentation/platform/access-controls/role-based-access-controls#project-level-access-controls): Control access to specific product resources like secrets, SSH hosts, or certificates
|
|
|
|
Beyond RBAC, Infisical also supports additional project-level permissioning features, [including attribute-based access control (ABAC)](/documentation/platform/access-controls/abac/overview), [temporary access grants](/documentation/platform/access-controls/temporary-access), and [additional privileges](/documentation/platform/access-controls/additional-privileges) for select project types.
|
|
|
|
To learn more, refer to the [access control documentation](/documentation/platform/access-controls/overview).
|