The figure shows an example User + Resource Credential Vault, in which credential entry is only accessible to a particular resource instance of the logged-in user.