Is there a way to set up different profiles/identities for a user that you can assume in a local session? Would be very helpful for local coding agents. I'm an admin, but I don't want to use

infisical run

and give my agent admin powers. I know I could use machine identity, but ideally don't want to have API key env vars locally if I can avoid it.

Hi @austin326, you do not strictly need a machine identity for this. A service token works with

run

as well, passed in as

INFISICAL_TOKEN

. Service tokens: infisical.com/docs/documentation/platform/token Passing it to run: infisical.com/docs/cli/commands/run#… If you would rather the agent never sees the real values, Agent Proxy is built for that. The agent gets a placeholder and the proxy swaps in the real credential on the way out. It works with machine identities today, and support for individual user identities is on the way, so you will be able to run the proxy locally on your own machine under your own identity. Agent Proxy: infisical.com/docs/…/overview