# Any option to see Azure credential secret key in Ansible Automation Platform

**URL:** <https://forum.ansible.com/t/any-option-to-see-azure-credential-secret-key-in-ansible-automation-platform/10745>\
**Category:** Get Help\
**Tags:** azure, aap\
**Created:** [November 6, 2024, 10:06pm UTC](https://forum.ansible.com/t/any-option-to-see-azure-credential-secret-key-in-ansible-automation-platform/10745 "2024-11-06T22:06:08Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![naga](https://avatars.discourse-cdn.com/v4/letter/n/7ab992/32.png) [@naga](https://forum.ansible.com/u/naga)\
**Post date:** [November 6, 2024, 10:06pm UTC](https://forum.ansible.com/t/any-option-to-see-azure-credential-secret-key-in-ansible-automation-platform/10745/1 "2024-11-06T22:06:08Z")

</div>

Hi Team,

I have added the sources to sync Inventory from Azure to AAP portal, for this I used Azure resources manager with client id, subscription id and tenant id so on.

While create this credential, I have enter all the details with  
Azure subscription id, tenant id, client id and client secret.  
So now I want to check my client secret is going to expire in couple of days,

Is there any option to see which client secret value on AAP portal, (because the client secret is showing as encrypted) else the azure credential expire date ?

Thanks,  
Nagaraj.

---

<div class="post-metadata">

**Author:** ![onefourfive](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/onefourfive/32/1775_2.png) [@onefourfive](https://forum.ansible.com/u/onefourfive)\
**Post date:** [November 7, 2024, 10:01pm UTC](https://forum.ansible.com/t/any-option-to-see-azure-credential-secret-key-in-ansible-automation-platform/10745/2 "2024-11-07T22:01:01Z")

</div>

The portal/webui does not allow secrets to be decrypted.

---

<div class="post-metadata">

**Author:** ![naga](https://avatars.discourse-cdn.com/v4/letter/n/7ab992/32.png) [@naga](https://forum.ansible.com/u/naga)\
**Post date:** [November 11, 2024, 3:24pm UTC](https://forum.ansible.com/t/any-option-to-see-azure-credential-secret-key-in-ansible-automation-platform/10745/3 "2024-11-11T15:24:35Z")

</div>

yeah,

other than portal/webUI, do we have any other option to see the value,

Because I have to validate and update the secret before expire date.

Thanks,  
Nagaraj.

---

<div class="post-metadata">

**Author:** ![anon81884396](https://avatars.discourse-cdn.com/v4/letter/a/b782af/32.png) [@anon81884396](https://forum.ansible.com/u/anon81884396)\
**Post date:** [November 11, 2024, 11:50pm UTC](https://forum.ansible.com/t/any-option-to-see-azure-credential-secret-key-in-ansible-automation-platform/10745/4 "2024-11-11T23:50:49Z")

</div>

If you have to update the secret… why not update it? Why do you need to see it before you update it if it’s on the verge of expiration?

---

<div class="post-metadata">

**Author:** ![naga](https://avatars.discourse-cdn.com/v4/letter/n/7ab992/32.png) [@naga](https://forum.ansible.com/u/naga)\
**Post date:** [November 12, 2024, 3:42pm UTC](https://forum.ansible.com/t/any-option-to-see-azure-credential-secret-key-in-ansible-automation-platform/10745/5 "2024-11-12T15:42:39Z")

</div>

Actually I am trying to find the right expired key in AAP subscription, because the expire date would be Dec 2 2025, I will wait till than can update the new secret key in AAP,  
but If I know which key is going to expire for which subscription mean, I could make a note and discuss with my azure team for before expire the secret value and avoid any failed sync in AAP.

Thanks,  
Nagaraj.

---

<div class="post-metadata">

**Author:** ![anon81884396](https://avatars.discourse-cdn.com/v4/letter/a/b782af/32.png) [@anon81884396](https://forum.ansible.com/u/anon81884396)\
**Post date:** [November 12, 2024, 9:06pm UTC](https://forum.ansible.com/t/any-option-to-see-azure-credential-secret-key-in-ansible-automation-platform/10745/6 "2024-11-12T21:06:41Z")

</div>

Have you tried creating some type of debug playbook, attaching the credential(s) to it, and spitting it out via “ansible.builtin.debug”? I’m not sure which fields get obfuscated and which don’t, which ones are environment vars or extra vars, etc. but it could be worth a shot. Sorry, haven’t really had need to do this.
