Orchestrator Cloud credentials security

Help Orchestrator
,
1

Hi, community!

I’d like to ask a question: In a UiPath platform with the Cloud Orchestrator that has credential type assets, could an admin user obtain the information about those assets through API or orchestrator database access?

Thanx in advance!

2

Hi @marta.merino,

Welcome to the UiPath Community :tada:

Anyone with access to this credential through UiPath Studio or API can decrypt the credentials and see.

Thanks,
Ashok :slight_smile:

3

@marta.merino

In a UiPath platform with the Cloud Orchestrator, including credential type assets, the information about those assets can be accessed programmatically through the UiPath Orchestrator API. However, access to the API and the ability to retrieve sensitive information such as credentials may be restricted based on user roles and permissions.

4

Hey @marta.merino

UiPath follows best practices to ensure the security of credentials and other sensitive information stored in the Orchestrator. As a result, admin users or any other users do not have direct access to view the plaintext values of credential assets through the API or database.

However, the Orchestrator API does provide endpoints for managing assets, including credential assets. While these endpoints allow for managing the assets, they do not expose the sensitive data directly.

Regards,
Ajay Mishra

5

Thanx, Ajay_Mishra, it helps!!

6

Thanx, Ashok, it helps a lot!!

1 Like
7

Hey @marta.merino

Mark the post as Solution. So, that It will help others to find the correct solution.

Thanks & Regards,
Ajay Mishra

8

Both answers work for me, not that it is a single solution to a problem, but since you asked for it, I will mark one as a solution

9

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.