Console
Create and revoke the credentials you use against this cache.
You are not signed in.
This cache has no identity provider configured, so there is no console. Credentials are managed by whoever operates it.
Your keys
A key does whatever your allowlist permits, unless you give it a scope — a narrowing, for a key meant for one job. A scope can only ever subtract, so narrowing your own key is always safe.
Users
An allowlist is one rule per line: a pattern, then pull, push or pull+push. * matches anything including slashes, so * pull+push is unrestricted. Patterns match upstream/repository and never the tag.