Manage child accounts with multi-tenancy for 1Password

With 1Password Enterprise Password Manager, you can set up and manage 1Password child accounts.

After you set up the parent account, you can add child accounts that you want to manage.

Add a child account

Before you add a child account, make sure your parent account is in the region of the account you want to manage. You can only create and manage accounts in your parent account’s region.

You’ll also need an owner, administrator, or person who belongs to a custom group with child account management permissions.

When you’re ready to add the account, follow these steps:

1. Sign in to your parent account on 1Password.com.
2. Choose Child accounts in the sidebar.
3. Select New account in the top right, then:
   • If you want to create a new account, choose Create new account and continue to the next step.
   • If you want to link an existing account, choose Link existing account and follow the onscreen instructions.
4. Enter an account name and optionally add a website.
5. Select the country or region the account is located in, then enter its address information and choose Save.

   This does not affect the region the account is located in. Your parent and child accounts must be in the same data region to be linked.

After you add the child account, choose the launch button beside it to sign in, then follow the steps to set it up.

Set up a child account

After you add or link a child account, follow these steps to set it up:

1. Create team policy templates, custom groups, and vaults to share items.
2. Implement a recovery plan.
3. Invite team members and set up automated provisioning if the child account uses an identity provider.
4. Deploy 1Password for Mac and Windows.

You’ll be administrating the account, so you may want to learn more about getting started with 1Password as an administrator.

Manage child accounts

To manage your child accounts, sign in to your parent account on 1Password.com and choose Child accounts in the sidebar.

Filter and sort

You can search for an account by name, or sort by status or filled seats. To remove sorting or filters that you’ve applied, choose Clear all at the top right of the page.

Edit account details

To edit an account’s details, select it from the list, then choose Edit. You can change the account name, website, and region. Select Save when you’re finished.

View shared vaults and items

You can view shared vaults and items within an account you manage. Launch into the account, then choose Vaults in the sidebar, select a vault, and give yourself access to it if you don’t already have it. Then choose View Vault.

Recover accounts

If team members in child account have lost access, you can recover their accounts so they can sign back in. An administrator in the account can also help recover accounts, so you may want to add someone to the Administrators group to help with this in the future.

Unlink a child account

Before you unlink a child account, consider the following:

• Someone in the account will need to manage it as an owner going forward. Launch into the child account you want to unlink, then add someone to the Owners group first.
• After the account is unlinked, it’ll be placed on a 14-day free trial and can be used normally until the end of that period. Someone in the Owners group will need to subscribe to 1Password or link another parent account to continue using it after the trial has ended.

To unlink a child account, make sure least one person is in the account’s Owners group. Then follow these steps:

1. Sign in to your parent account on 1Password.com.
2. Choose Child accounts in the sidebar.
3. Find the account and choose the ellipsis > Unlink.

Manage permissions

To manage permissions for a custom group to help manage child accounts:

1. Sign in on 1Password.com.
2. Select Groups in the sidebar, then select the group.
3. Select Manage in the Permissions section.
4. Scroll down to the Child Account Tasks section to see the available permissions.

Learn more

• Best practices for securing your 1Password Business account
• Offboarding a team member