Hey Bitwarden team,
I’d like to propose a feature enhancement that would improve machine account management transparency. Currently, while we can view both machine accounts and secrets individually, there is no straightforward way in the UI to see all secrets that a specific machine account has access to. In our environment, secrets are often accessed by multiple machine accounts (we utilize one machine account per service).
When viewing a machine account, it would be beneficial to have a view that displays all secrets this account can access, along with their permission levels (read/write). Currently, while we can assign secrets to machine accounts, viewing the complete access profile of a machine account requires using the CLI.
This enhancement would enable us to:
- Quickly audit machine account permissions
- Ensure principle of least privilege
- Make access reviews much simpler
- Track how secrets are being shared across our services