1Password comes with three built-in groups you can use to delegate administrative responsibilities to your team members. With 1Password Business, you can also use custom groups.
Add a second owner to your team as soon as possible to make sure everyone on your team always has access when they need it, including you.
People in the Security group can view security reports and account activity.
You’ll only see this group after you set up the domain breach report.
Provision Managers can provision and confirm team members, as well as recover accounts. Only the Automated User Provisioning service account or CLI user who manages provisioning should be included in this group.
You’ll only see this group after you set up automated provisioning with 1Password SCIM Bridge or 1Password CLI.
Manage group membership
To add or remove people from the built-in groups:
- Sign in to your 1Password account.
- Click Groups in the sidebar to see a list of your groups.
- Click Owners, Administrators, or Security.
- Click Manage in the People section.
- Select or deselect team members, then click Update Group Members.
Appendix: Default permissions
The built-in groups cannot be deleted. The chart below shows the default permissions for each of them. With 1Password Business, you can create groups with custom permissions.
|View Administrative Sidebar||✅||✅||✅||❌|
|View Security Reports||❌||❌||✅||❌|
|Invite & Remove People||✅||✅||❌||❌|
|Manage All Groups||✅||✅||❌||❌|
Create Vaults is not turned on by default for team members on teams created before April 9, 2017.
Appendix: Export group members
You can export a list of everyone in a group to a comma-separated values (CSV) file:
- Click Groups in the sidebar.
- Choose the group you want to export.
- Click “Export list of group members (CSV)” at the bottom of the People section.
You may need to scroll down to see this button.
The exported file includes UUIDs, names, and roles of people in the group. If someone’s role is
R, they’re a group member. If their role is
A, they’re a group manager.