"Manage" permissions should be set on a secret key mapped to those credentials that will be used by a given team.

"Read" permissions should be set on a secret key mapped to those credentials that will be used by a given team.

"Read" permissions should be set on a secret scope containing only those credentials that will be used by a given team.

"Manage" permissions should be set on a secret scope containing only those credentials that will be used by a given team. No additional configuration is necessary as long as all users are configured as administrators in the workspace where secrets have been added.