In general, the vault allows you to override agent configuration values, the appropriate ones in thie case would be agent.git_user and agent.git_pass - since the execution agent is run in Enterprise under the task owner's identity, you can simply configure two different vaults for the two different teams/groups, which will effectively cause the agent to pull a different vault when running each team's task, and getting the correct configuration