What teams actually use Vendor Access Vault for

• Share credentials with contractorsGive a contractor the Stripe login without emailing a password or adding them to a vault forever.
• Temporary accessTemporary access that expires on its own beats access somebody has to remember to revoke.
• Offboard a vendorThe contract ended six months ago. Does their login still work? Make that answerable.

Every one of these is the same problem wearing a different hat. Somebody outside the core team needs a credential, the easy way to give it to them is to send a copy, and a copy is the one thing you can never take back.

The alternative is to grant access rather than hand over a copy: an admin approves it, it expires on its own, and every reveal is written to an append-only audit log. That single change is what makes all three of these jobs tractable.