Skip to main content
NEW · Blast Radius: a field playbook for leaked API keys on AWS, GCP and Azure
Documentation menu

People and owners

Unassigned and departed-owner secrets

Review secrets with no assigned owner or an inactive owner.

Secrets without an owner

  1. Open People and owners › Unassigned.
  2. Open a secret and review its locations and service information.
  3. Confirm the current responder and assign them as the owner.

Secrets associated with inactive owners

  1. Open Inactive owners' keys.
  2. Check each secret's owner and verification status.
  3. Assign a new responder and assess whether the key needs replacement or revocation.

An inactive account does not mean its secret has been revoked. Check the secret's verification state and dependent services separately. For directory-derived information, also check the latest synchronization result.

Screen example
Screen example