---
title: 4.3 Secret Data Vault
slug: singleconnect-2-16/43-secret-data-vault
description: Learn how to securely store sensitive data like SSH keys and SSL keys using the Single Connect Secret Data Vault. This document provides step-by-step instructions on creating, editing, and managing secret data definitions, as well as setting permissions f
docTags: 
createdAt: 2020-08-04T11:22:53.000Z
---

Single Connect Secret Data Vault enables to store SSH Keys, SSL Keys and other sensitive data.

**Create Secret Data**

1. Log in to the Single Connect GUI
2. Navigate to Secret Data Vault
3. Enter related information and Save



::Image[]{src="https://api.archbee.com/api/presign/g9cApVza9NIhSh0pjZYtA/2FyhXujWxZT0FXdIdx73s_image.png" size="84" position="center" showCaption="false"}



**Showing-Editing Secret Data Definition**

1. Log in to the Single Connect Web GUI
2. Navigate to Secret Data Vault
3. Select the secret data to edit or show. and click on the “Options” button



::Image[]{src="https://api.archbee.com/api/presign/g9cApVza9NIhSh0pjZYtA/uHKSNUV4NzU12y1PcjyTY_image.png" size="30" position="center" showCaption="false"}



   4\. Select “Show Secret” to show secret data and enter a reason to display the data

::Image[]{src="https://api.archbee.com/api/presign/g9cApVza9NIhSh0pjZYtA/02O-jQ4NH2A_-s6zapLs__1.png" size="50" position="center" showCaption="false"}



After revealing secret data, the “Secret Data” field becomes editable

::Image[]{src="https://api.archbee.com/api/presign/g9cApVza9NIhSh0pjZYtA/xXHOdrtnkNfF7FCf4orxS_image.png" size="84" caption="Secret Data Vault" position="center" showCaption="true"}



   5\.  Edit the “secret data” field as desired and save to change the secret data

Select “Edit Secret” from the options after step 2 to edit the name, description, type, and IP address fields.

****
****
**Permissions for Secret Data**

Some authorizations must be given to users to be able to create secret data in the vault. 
Also, these users who are in an “admin group” or have the “sc.secret.data.vault.admin” functions have authority to show, edit, and delete all secret data defined in Single Connect.

- **Give Admin Group Authority**

1. Log in to the Single Connect Web GUI
2. Navigate to User Management > User Accounts
3. Open the User Group Definition tab
4. Select the related User group and tick the check-box of “Admin Group” and Save



::Image[]{src="https://api.archbee.com/api/presign/g9cApVza9NIhSh0pjZYtA/iIoFayJ0mQArvqND-89nD_image.png" size="64" position="center" showCaption="false"}



- **Define the “admin” Portal Function**

1. Log in to the Single Connect Web GUI
2. Navigate to Policy Control > Portal Functions
3. Set the “sc.secret.data.vault.admin” function for the user Group with Portal Realm

Authorizations can be given to users to be able to create, show, edit, delete the secret data for members of same user group. 
The full control permission is only valid when the users who have the “sc.secret.data.vault.group.admin” functions are in the same user group with the user who creates the secret data.

- **Define “group admin” Portal Function**

1. Log in to the Single Connect Web GUI
2. Navigate to Policy Control > Portal Functions
3. Set the “sc.secret.data.vault.group.admin” function on the user Group with Portal Realm



**Check Managing Menu List chapter for creating Portal Realms**

Different authorization levels can be defined to Secret Data. 
To set permissions for Secret Data:

1. Log in to the Single Connect Web GUI
2. Navigate to Secret Data Vault
3. Select a secret data to set permissions for and click Options button
4. Select the “Permissions” option 
5. Select the “user group” and the “permission type”.
6. Save



::Image[]{src="https://api.archbee.com/api/presign/g9cApVza9NIhSh0pjZYtA/sNHPNgdKecUp8Ui9ubPhn_image.png" size="60" position="center" showCaption="false"}



**Permission Types:**


**READ\_ONLY**: These users have only authority to see Secret Data.

**FULL\_CONTRO**L: Users who have full control permission are admin of this Secret Data. The users have authority to delete, edit, show secret data and give permissions.