Permissions/Sharing Question

PasswordSchmassword

We are evaluating 1PW for use with a small team. We manage passwords for our clients, and will need to create a separate vault for each client (yes I know we could use one vault with tags for each client, but that is not an option).

1. Will admins have access to ALL vaults/passwords regardless of who creates the vault and whether they share it? We have encountered issues with another PW manager where if someone creates a folder and forgets to share it, we are SOL until we reach that person and get them to share it.

2. Is there a way to set default permissions that get applied automatically when a vault is created?

Thanks

---

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided

ag_max

Hi @PasswordSchmassword, thanks for taking the time to try out 1Password for your team. I'll be happy to answer your questions. 👋

Will admins have access to ALL vaults/passwords regardless of who creates the vault and whether they share it? We have encountered issues with another PW manager where if someone creates a folder and forgets to share it, we are SOL until we reach that person and get them to share it.

By default, any member of the Owners group, the group with the highest level of permissions, has vault management privileges for every shared/user-created vault (non-Private vault) on your team, allowing them to assign themselves access to these vaults and view and manage the secure password and item contents. The second highest level group, the Administrators group, if they're toggled during vault creation, will also have vault management privileges when a vault is created.

Overall, provided there is an account owner who can sign in and access their account, they'll be able to restore access to any of these shared/user-created vaults where a former vault manager has departed the company.

Is there a way to set default permissions that get applied automatically when a vault is created?

Currently, when you assign access to a vault, they'll have full permissions applied automatically. At that time and at any time in the future, any vault manager can manually tweak those permissions for the group or individual. To your exact question, there isn't a way to set default permissions for users or groups during vault creation, however, though I'll be happy to pass this on as a feature request to our development team for consideration.

You can read more about permissions in 1Password Business and Teams in the article below:

Create, share, and manage vaults in your team

PasswordSchmassword

Thanks for your response!

ag_max

You're very welcome, @PasswordSchmassword. Let our team know if we can help with anything going forward.