Hi team - I'm new to Infisical running a POC right now. Currently have a simple setup. In my organization I have a machine identity that I want to represent development machines which is provisioned with Universal Auth which creates 1 time access tokens with the client id and secret. That machine identity is member of a project I call provisioning. In that project are a set of secrets which are all in the development environment. Currently the Staging and Production environments in that project do not contain any secrets. In the future they would. I am wondering if it is possible to restrict which project environment can be read by a token. For example I would like to generate an access token which is single use and can only read the secrets in the project's development environment and another single use token which can only read the project's staging environment secrets. TIA!

Hi Noah - yes, good that you were able to figure out. I will also pass this feedback to our UX team so that we make it clearer for you and other users 🙂