Team overview
Path: /settings → Team tab
The Team tab surfaces the team's identity, the base numbers assigned to it, AWS Secrets Manager configuration for secret storage, and call recording configuration. Secrets Manager is the foundation for SECRET-type variables.
Team info
| Field | Editable | Description |
|---|---|---|
| Team Name | No | Set by a superadmin. Read-only here. |
Base numbers
Lists base numbers assigned to your team by a superadmin. Per row:
| Field | Editable | Description |
|---|---|---|
| Number | No | The phone number. |
| Description | No | Set by superadmin. |
| Header Manipulation Configs | ADMIN | Team-specific configs (multi-select). Default platform configs are applied separately. |
AWS Secrets Manager
| Field | Required | Description |
|---|---|---|
| AWS Region | Yes | Region where secrets live. Default eu-central-1. |
| Secrets Manager Key | Yes | Path/key for your team's secrets (e.g. delphi/teams/<team>/variables). |
| AWS Assume Role ARN | No | Cross-account setups only. arn:aws:iam::<ACCOUNT_ID>:role/<ROLE_NAME>. Empty if same account. |
| AWS Account ID | Auto | Extracted from Role ARN. |
| Complete ARN | Auto | Full Secrets Manager ARN with copy button. |
Same-account vs cross-account
- Same-account — Delphi shares your AWS account. Only region + key required.
- Cross-account — Delphi assumes a role into your account. Each team's secrets isolated; CloudTrail audit on your side; you can revoke at any time.
For the IAM role setup, see AWS security setup.
Call recording
| Field | Required | Description |
|---|---|---|
| Recording S3 Bucket | No | Bucket for recordings. Required if recording is used. |
| Recording AWS Region | No | Default eu-central-1. |
| Recording IAM Role ARN | No | Cross-account setups only. |
Recording must also be enabled per-app. When configured, the platform installs an S3 lifecycle rule expiring recordings under recordings/ after 180 days.
Workflows
Configure Secrets Manager
- Cross-account: finish the AWS security setup.
- Set Region + Secrets Manager Key.
- Set the Assume Role ARN (cross-account only).
- Save and verify the Complete ARN.
- You can now create SECRET variables.
Configure call recording
- Enter the S3 bucket name (+ region if not the default).
- Set the Recording IAM Role ARN (cross-account only).
- Save.
- Enable recording on each app that should produce recordings.
See also
- Variables and secrets — uses Secrets Manager.
- AWS security setup — IAM role setup.
- Header manipulation.