docs(access): add credential lifecycle contextual help

2026-08-21 21:14:31 +02:00
parent fa0c85e03a
commit 2d1b1e356e
11 changed files with 255 additions and 40 deletions
@@ -52,7 +52,12 @@ through declared capabilities or metadata.

 - `access.workflow.grant-user-access` covers the user, group, and role path.
 - `access.reference.admin-access-fields` covers accounts, roles, API keys, and
-  reusable credentials.
+  their backing administration fields.
+- `access.workflow.manage-api-keys` owns exact help for accountable ownership,
+  bounded scopes and expiry, one-time secret custody, and immediate revocation.
+- `access.workflow.manage-service-account-credentials` owns exact help for the
+  account ceiling, activation state, credential rotation/revocation, one-time
+  secret custody, concurrency, and retirement consequences.
 - `access.reference.external-function-role-mappings` explains the
  Organizations, IDM, and Access responsibility split.
 - Files and Mail blockers link to documentation supplied by the owning module.