NEWFlows V2 has been releasedSee what shipped
INTEGRATIONSCLOUD INFRASTRUCTURE
Doppler28 OF 28 CAPABILITIES ASSESSED

Who can read your Doppler secrets, project by project

Doppler workplace users, service accounts, groups and project members with their roles, with roles, group members and project access changed from Ploy.

TYPE · INFRAAUTH · API TOKENDOMAIN · DOPPLER.COM
Doppler connectorHOURLY SYNCCAPABILITIES
WHAT PLOY DOES
Sync workplace usersEvery user in the connected workplace arrives in Ploy as an identity, with their workplace role on their access.
READ
Sync service accountsEvery service account lands as a non-human identity with its workplace role.
READ
Read two-factor statusEach user shows whether two-factor authentication is turned on.
READ
Map groupsEvery group lands as a resource with its members.
READ
Map projects and their membersEvery project lands as a resource with each user and service account granted it, and their project role. Project access is what lets someone read secrets.
READ
Change a workplace rolePloy moves a user to another workplace role.
WRITE
Add and remove group membersPloy adds a person to a group or takes them out of it.
WRITE
Grant, change and revoke project accessPloy gives a person a role on a project, changes it, or removes their access to the project.
WRITE
2.1WHAT IT UNLOCKS

Three jobs this connector does on day one

REQUESTS

Project access on request

An approved request gives the person the project role they asked for, and a revoke takes it away.

REVIEWS

Who can read production secrets

Each project lists its members and their roles, service accounts included, so a reviewer sees exactly who holds secrets access.

LEAVERS

Off every project on the last day

Offboarding removes the person from groups and projects, so they lose access to secrets straight away.

2.3

SETUP

TYPICALLY 10 MINUTES
STEP 01

Create a service account for Ploy

In Doppler, open Team, then Service Accounts. Give the account a custom workplace role with the team, service_accounts and all_enclave_projects permissions. To make changes from Ploy, also add team_manage and all_enclave_projects_admin.

STEP 02

Create an API token

Create an API token for the service account and paste it into Ploy. A token with no expiry is easiest to keep working.

STEP 03

Watch the first sync

Ploy tests the token, then users, service accounts, groups and project members land in the graph.

2.4OFTEN CONNECTED TOGETHER
VercelCLOUD INFRASTRUCTUREGitHubSOURCE CONTROLGoogle WorkspaceIDENTITY SOURCE
BROWSE ALL 117 INTEGRATIONS

Connect Doppler, see it in 10 minutes.