Manage technician access to shared vaults in a managed company account

Learn how to manage shared vault access for the External Account Managers group in a managed company account.

After you add a company, you can grant individual MSP technicians in the External Account Managers (EAM) group permission to manage shared vaults if an Owner in the account allows it. Owners can turn Advanced permissions on or off:

  • Advanced permissions on: When you create a new company, the EAM group has this permission by default. When you link an existing company, it’s off by default. You can grant Advanced permissions to technicians in the group who you want to manage all shared vaults in the account, as well as manage access to groups that can manage vaults.
  • Advanced permissions off: If an Owner turns off Advanced permissions, technicians can’t manage access to shared vaults or groups that can manage access to vaults, but still have the other permissions listed on the EAM group page. An account Owner can also manually share vaults with technicians who have access to the account.

Discuss these options with your client to decide which permission is right for them. When you’re ready to adjust the permissions, follow the steps below.

Turn on Advanced permissions

To turn on Advanced permissions, ask an Owner in the managed company account to follow these steps:

  1. Sign in to the managed account on 1Password.com.
  2. Select Groups in the sidebar, then select the External Account Managers group.
  3. Select Manage in the Permissions section.
  4. Turn on Advanced permissions for external account managers at the bottom of the Permissions tab.

After they add or remove this permission from the group, your technicians may need to launch into the company again to see the changes reflected.

Manage individual technician permissions

If the managed company has turned on Advanced permissions for the EAM group, you can select individual technicians to grant them Advanced access:

  1. Sign in to your MSP account on 1Password.com.
  2. Select Managed Companies in the sidebar.
  3. Select the company, then select the People tab.
  4. Turn on or off Advanced in the “Permissions in managed account” column for the technician.

Managed companies: Turn off Advanced permissions

If your account is managed by an MSP and you don’t want technicians to have access to shared vaults, follow these steps to turn off Advanced permissions:

  1. Sign in to the managed account on 1Password.com.
  2. Select Groups in the sidebar, then select the External Account Managers group.
  3. Select Manage in the Permissions section.
  4. Turn off Advanced permissions for external account managers at the bottom of the Permissions tab.

After you turn off Advanced permissions, you can still share specific vaults with technicians who have access to the account.

Learn more


Published: