A SecretGrant is how the Suite platform records that a particular product has been given access to a tenant's stored secret. Each grant ties a tenantSecretId to a productId, capturing who authorized it through grantedBy and exactly when via grantedAt. The linked secret, product, and granter relations let the platform show, at a glance, which products may read which secrets and who approved that access. Because access to a tenant's secrets is sensitive, every grant is an explicit, auditable decision rather than an implicit default.
Technical section
Data model, API, and internals — visible to developers.