Workspace-Level Secrets

Workspace secrets belong to a single workspace, and resolving one requires MANAGE permission on that workspace. It's the one scope where we changed the list and the form structurally. The list picks up a workspace selector in its toolbar, the create form picks up a required Workspace dropdown alongside Secret Name, Secret Type and Description, and the very same list turns up a second time inside the workspace itself, pre-filtered to that workspace.

List

Route	/tenant/<tenantId>/secrets/workspace
Toolbar	A workspace selector dropdown on the left, a Search By Name field, and a + Secret button at the top right
Empty state	No Workspace Secrets Found. with an illustration and a secondary + Secret button

Columns: Name, Secret Type, Created By, Modified By, Created Time, Modified Time, Actions. Every column except Secret Type and Actions is sortable.

The Actions kebab menu holds exactly two entries, Edit and Delete.

Create

Route	/tenant/<tenantId>/secrets/create-workspace-secret
Breadcrumb	Secrets ❯ Workspace ❯ New workspace secret
Footer	Reset and Create

Basic Details on this scope add a required Workspace dropdown to the fields shared with the other scopes:

Field	Required	Control	Placeholder / default
Secret Name	Yes	text	title_example_user_secret_1
Secret Type	Yes	dropdown	defaults to ENVIRONMENT VARIABLE
Workspace	Yes	dropdown	workspace scope only
Description	No	textarea	Enter Description

We offer all seven secret types at this scope. See Create Secret for the per-type field matrix.

From Inside a Workspace

The same list is reachable from the workspace Secrets tab at /workspace/<workspaceId>/secrets. It's the workspace-scoped secrets list pre-filtered to the current workspace, the workspace selector is pinned to that workspace, with the same info bar, the same Search By Name box, the same seven columns, and a + Secret button on the toolbar.

The workspace tab bar order is Runs | Notebooks | Jobs | Files | JDBC | Access Management | Secrets.