Documentation

Support

Services

Services

Secret hierarchy

Understand the hierarchical structure of secrets.
Read time 1 minuteLast updated 17 hours ago

You can store secrets in a hierarchy. The hierarchy is a tree structure that organizes secrets into levels. Each level represents a different scope of access. The hierarchy is based on the structure of Unity Cloud projects, which consist of organizations, projects, and environments.

Hierarchy levels

The three levels align with the structure of Unity Cloud projects.

Level

Description

OrganizationSecrets stored at the organization level are accessible to the organization and all projects and environments in the organization.
ProjectSecrets stored at the project level are accessible by the project and all environments in the project.
EnvironmentSecrets stored at the environment level are only accessible to the environment where they are stored.

Inheritance

Secrets are inherited from the levels above them. For example, project-level secrets inherit from organization-level secrets, and environment-level secrets inherit from project-level and organization level secrets. You can view inherited secrets at each level. You can create an override to change the value of an inherited secret at a lower level.

Override secrets

You can override secrets at a lower level. For example, you can override a project-level secret at the environment level. The overridden secret is only accessible to the scope where it is stored. Overrides are identified by a shared secret key. If you have a secret with the same key at multiple levels, the secret at the lowest level takes precedence. For example, an environment-level secret overrides a project-level secret, and a project-level secret overrides an organization-level secret. If you delete an override, the secret reverts to the value stored at the level above it.