---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Configuring Unified Secrets Gateway

# Configuring Unified Secrets Gateway {#ariaid-title1}

Release version: Brazil  
Updated September 18, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Learn how to configure Unified Secrets Gateway (USG) to organize and control access to secrets on your instance.

## Roles required for configuring Unified Secrets Gateway

To learn about the roles required to configure USG, see [Role requirements for Unified Secrets Gateway](https://www.servicenow.com/docs/zFG29lt7EH45rIN0LHQilg "Learn about the roles required to configure Unified Secrets Gateway (USG).").
* **[Role requirements for Unified Secrets Gateway](https://www.servicenow.com/docs/zFG29lt7EH45rIN0LHQilg)**   
  Learn about the roles required to configure Unified Secrets Gateway (USG).
* **[Create an alias group](https://www.servicenow.com/docs/0eRcY3~tlrJ9S8ntWTJ3cg)**   
  Create an alias group to organize secrets and define where they are stored in ServiceNow.
* **[Create an identity group](https://www.servicenow.com/docs/fPakl6GfJwIczc1wNvgPGQ)**   
  Create a custom identity group to manage access for a specific set of members.
* **[Create consumer grants](https://www.servicenow.com/docs/~XUmvSnOG2L75prWufxbaQ)**   
  Create consumer grants to specify which identity groups can access which alias groups.
* **[Add members to an identity group](https://www.servicenow.com/docs/jHmm8QlyHFaSdsLWp_~8VQ)**   
  Add existing members to an identity group to control which entities can access secrets through consumer grants.
* **[Remove members from an identity group](https://www.servicenow.com/docs/BJiDJ2bH9y5JQUs7jaoZuw)**   
  Remove a member from an identity group when that member no longer requires access to secrets.