IT Ops — ManageEngine daily
HEALTHYIT Infrastructure & Operations · production · 1 dataset
k-2026-06-02-01ACTIVEPRODUCTION
SHA256:b79b7df60161
Issued 2 Jun 2026 to IT Infrastructure & Operations · expires 29 Nov 2026
push:datasetread:receiptread:schema
67
DAYS LEFT
ROTATION
Two keys may be active at once, overlapping for at most 30 days. That overlap is not a convenience — without zero-downtime rotation, the rotation never happens, and an eternal credential is the one nobody replaces.
WHAT WE REFUSE TO ISSUE
- · An organisation-wide shared key. A Telesales key must not be able to write Finance numbers.
- · A credential that can both read and write. This one is push-only — it cannot read a single metric value.
- · An unlimited lifetime. 180 days by default, 365 at most.
- · “Resend me the same key.” Lost means rotate, never recover.
Each of these would be a one-line feature, and each would quietly undo the row-level security model in 04 §8. That is why they are listed as refusals rather than left unbuilt.