Permissions/Sharing Question

We are evaluating 1PW for use with a small team. We manage passwords for our clients, and will need to create a separate vault for each client (yes I know we could use one vault with tags for each client, but that is not an option).

  1. Will admins have access to ALL vaults/passwords regardless of who creates the vault and whether they share it? We have encountered issues with another PW manager where if someone creates a folder and forgets to share it, we are SOL until we reach that person and get them to share it.

  2. Is there a way to set default permissions that get applied automatically when a vault is created?

Thanks


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided

Comments

  • ag_maxag_max

    Team Member
    edited January 1

    Hi @PasswordSchmassword, thanks for taking the time to try out 1Password for your team. I'll be happy to answer your questions. 👋

    Will admins have access to ALL vaults/passwords regardless of who creates the vault and whether they share it? We have encountered issues with another PW manager where if someone creates a folder and forgets to share it, we are SOL until we reach that person and get them to share it.

    By default, any member of the Owners group, the group with the highest level of permissions, has vault management privileges for every shared/user-created vault (non-Private vault) on your team, allowing them to assign themselves access to these vaults and view and manage the secure password and item contents. The second highest level group, the Administrators group, if they're toggled during vault creation, will also have vault management privileges when a vault is created.

    Overall, provided there is an account owner who can sign in and access their account, they'll be able to restore access to any of these shared/user-created vaults where a former vault manager has departed the company.

    Is there a way to set default permissions that get applied automatically when a vault is created?

    Currently, when you assign access to a vault, they'll have full permissions applied automatically. At that time and at any time in the future, any vault manager can manually tweak those permissions for the group or individual. To your exact question, there isn't a way to set default permissions for users or groups during vault creation, however, though I'll be happy to pass this on as a feature request to our development team for consideration.

    You can read more about permissions in 1Password Business and Teams in the article below:

    Create, share, and manage vaults in your team

  • edited January 1

    Thanks for your response!

  • ag_maxag_max

    Team Member

    You're very welcome, @PasswordSchmassword. Let our team know if we can help with anything going forward.

Leave a Comment

BoldItalicStrikethroughOrdered listUnordered list
Emoji
Image
Align leftAlign centerAlign rightToggle HTML viewToggle full pageToggle lights
Drop image/file