Folders

A folder holds accounts. When you give a user, group, or machine identity a role on a folder, the role applies to every account in the folder, including accounts added later. Put accounts in the same folder if the same people need them. For example, you can create one folder per team (backend-team), per application (checkout-service), or per environment (prod), depending on how access works in your organization. If a user or group needs only one account from a folder, give them a role on that account instead of on the folder.

​

Create a folder

Only product admins can create folders. To learn how to become one, see Product membership. After you create the folder, give at least one person the Admin role on it, so they can add accounts and manage the folder’s access.

​

Give people access to a folder

To give a user, group, or machine identity a role on the folder, follow the steps in Assign a role. To learn what each role allows, see Folder and account memberships. If some accounts in the folder need approval before anyone can use them, the folder’s Admins choose the approvers on the folder’s Approvals tab. To learn how, see Access requests.

​

Join a folder as an organization admin

If you have the organization Admin role, you can make yourself the Admin of any folder, such as a folder whose last Admin has left the company. The Admin role replaces any role you already had on the folder. Infisical notifies the folder’s other Admins and records the join in the audit logs.

​

Next steps