Forum Discussion

Former Member's avatar
Former Member
5 years ago

[21] Conditionnal injection (jinja?)

Hi CLI-team, First of all, thanks for the CLI. v1 already changed our way of working at Cortexia. Thanks for the v2 which allows us to already clean and consolidate our scripts by simply upgrad...
cli
1P_Simon's avatar
1P_Simon
Icon for 1Password Team rank1Password Team
4 years ago

Hi Emmanuel,

Thank you for providing extra details! I love figuring this out together.

they do not need any more human attendance

We're considering to add service accounts. They'd represent machine access to 1Password and not require human attendance. To allow the container on the edge device to authenticate as the service account and be able to decrypt the secrets, you'd add a service account credential on the device. You'd be able to set access controls on the service account just like you currently can for user accounts, so that you can limit the vaults the service has access to to apply the principle of least privilege.

Would this work for your use case?

Cheers,
Simon