Folders

Folders organize secrets into hierarchical groups. Each secret exists within one folder. You manage access to secrets through folder-level permissions, enabling simple sharing of related secrets.

To search for a specific folder, click the magnifying glass icon in the Folders tab, then type in the name of the folder you're searching for. You must use the search feature in the Folders tab to pull up folder results.

You can nest folders to build parent‑child relationships and deeper hierarchies, and each subfolder can hold both secrets and additional subfolders.

Unless disabled by an administrator, Delinea Platform and Secret Server automatically create a default personal folder for each user account, named to match the account. The contents of a user's personal folder remain private, unless they share a specific secret with other users.

In a break-glass scenario, a user with Unlimited Vault Access permissions can access any personal folder. See Unlimited Vault Access.

Folder Permissions

Each folder has a permission set that defines access levels for users and groups.

Users and groups can be granted the following permissions:

  • Owner: Allows the user to create, move, delete, and rename folders. Owners can also change folder permissions and inheritance settings.

  • Edit: Allows the user to create subfolders, move secrets into the folder, and add new secrets. (The Edit permission does not allow setting custom folder permissions.)

  • Add Secret: Allows the user to add a secret to the folder but not access the added secret.

  • View: Allows the user to view the folder and the secrets it contains.

Permissions are only set for the folder, not for individual secrets it contains. Users or groups added to the folder receive the same permissions. Each user or group receives a permission set that defines their access level within the folder.

Secrets inherit permissions from their parent folder by default. When you assign permissions to a folder, all secrets in that folder automatically receive those permissions. This inheritance applies to existing secrets and to any secrets added later. Changes to folder permissions automatically apply to all secrets in the folder.

You can override permission inheritance on individual secrets by setting custom permissions. When a secret has custom permissions, it no longer inherits from its parent folder and keeps those settings even if folder permissions change.

Sub-Folder Permissions

Subfolders can either inherit permissions from their parent folder or have independent permission sets:

  • When a subfolder inherits permissions, any changes you make to the parent folder’s permissions automatically apply to the subfolder. Secrets within the subfolder also inherit those permissions.

  • When a subfolder has custom permissions, its permissions are independent of the parent folder. Secrets within the subfolder inherit the subfolder’s custom permissions.

Personal Folders

Personal folders provide a secure place to store work-related secrets that other users do not need access to.

A personal folder belongs to a single user who can create secrets and subfolders within it. Users cannot modify sharing permissions on their personal folders or subfolders.

Changing the Default Folder

When you create a secret in Credential Manager, the default option in the Choose a Folder field is your personal folder.

If an administrator disables personal folders, the Choose a Folder field lists all the other folders available to you.

For more information on managing folders, refer to the guides for Delinea Platform (Secret Folders) or Secret Server (Folders).