> For the complete documentation index, see [llms.txt](https://docs.duplocloud.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.duplocloud.com/docs/armor/providers/user-level-credentials.md).

# User-Level Credentials

A Scope's credential is normally shared by everyone who uses it — a team-level secret set on the Provider. **User-Level Credentials** let an individual user override that shared credential with their own, for a specific Scope, without affecting anyone else using the same Scope.

This is useful when different people need to act with their own identity against the same infrastructure — for example, each engineer using their own IAM role on a shared `aws-read-only` Scope instead of a single team credential.

## Adding a Personal Credential

Personal credentials are managed from your own **Profile**, not from the Providers admin pages.

### 1. Open Credential Overrides

Click your avatar in the top-right corner and select **Profile**. Go to the **Credential Overrides** tab.

![Credential Overrides tab, empty state](/files/1BDVL9heMXZs3boaSjH9)

### 2. Select a scope

Click **Add Credential**. Choose the Scope you want to override from the list — it shows every Scope you have access to across your workspaces.

![Select Scope modal](/files/iqaE8XXTwLdl5AttvehG)

Click **Continue**.

### 3. Fill in your credential

Give it a **Display Name**, then fill in the fields for the Scope's provider type:

* **AWS** — choose **Access Key** (Access Key ID + Secret) or **IAM Role** (Role ARN)
* **Kubernetes** — choose **Token**, **Cloud Role**, **Service Account**, or (on AKS) **Service Principal** / **Managed Identity**
* **Other providers** — the same credential fields the shared credential uses, plus any custom key/value pairs you need

![Add Personal Credential form](/files/AeZthKCQRpCT7UBl6UC8)

Click **Create**.

### 4. It's active immediately

Your personal credential appears in the table and is used automatically on every ticket you run against that Scope — no per-ticket toggle needed.

![Personal credential added, shown in the table](/files/0M8QtSorsM3ZI1ZtfSrx)

{% hint style="info" %}

* Your personal credential only affects **your own** tickets — other users on the same Scope keep using the shared credential (or their own override, if they've set one).
* Use the **Enabled** toggle to fall back to the shared credential without losing your saved values — disabling doesn't delete the credential.
* Any user with access to a Scope can add their own override for it; there's no additional admin permission required.
  {% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.duplocloud.com/docs/armor/providers/user-level-credentials.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.