Secret hierarchy
Understand the hierarchical structure of secrets.
Read time 1 minuteLast updated 9 months ago
You can store secrets in a hierarchy. The hierarchy is a tree structure that organizes secrets into levels. Each level represents a different scope of access.
The hierarchy is based on the structure of Unity Cloud projects, which consist of organizations, projects, and environments.
Hierarchy levels
The three levels align with the structure of Unity Cloud projects.
Level | Description |
|---|---|
| Organization | Secrets stored at the organization level are accessible to the organization and all projects and environments in the organization. |
| Project | Secrets stored at the project level are accessible by the project and all environments in the project. |
| Environment | Secrets stored at the environment level are only accessible to the environment where they are stored. |
Inheritance
Secrets are inherited from the levels above them. For example, project-level secrets inherit from organization-level secrets, and environment-level secrets inherit from project-level and organization level secrets.
You can view inherited secrets at each level. You can create an override to change the value of an inherited secret at a lower level.
Override secrets
You can override secrets at a lower level. For example, you can override a project-level secret at the environment level. The overridden secret is only accessible to the scope where it is stored.
Overrides are identified by a shared secret key. If you have a secret with the same key at multiple levels, the secret at the lowest level takes precedence.
For example, an environment-level secret overrides a project-level secret, and a project-level secret overrides an organization-level secret.
If you delete an override, the secret reverts to the value stored at the level above it.