User management

To keep your business secure, it’s essential that you monitor and control what everyone has permission to access. A password manager like 1Password gives you an easy-to-use system for organizing your company’s credentials, as well as granting, revoking, and monitoring access to them.

Why managing your team’s password access is important

Managing who has access to what within your business – a process often called “provisioning” – is critical to keeping your information secure. When a new employee joins your company, you want to be able to quickly grant them access to the accounts and data they need to perform their job. You’ll also want an easy way to change that level of access when they’re promoted or change roles. And finally, you want to have the option to immediately revoke access if they ever decide to leave your company.

Managing access in this way keeps information on a ‘need to know basis’. If you give everyone access to what they need and nothing more, there’s a lower chance that someone will accidentally leak sensitive information or make a mistake that lets a cybercriminal slip past your digital defenses. With 1Password Teams and 1Password Business, you and other trusted administrators can grant and revoke access to individual team members with just a few clicks.

Creating user groups and password vaults: organizing access

1Password’s system for managing user access gives you a secure and convenient way to grant team members access to everything they need. With 1Password Teams and 1Password Business, you can organize passwords in different vaults, and then decide which employees should be able to access them – individually or by designated group. Here’s how it works:

  • Step one: Organize your passwords and other sensitive information into secure, labeled vaults (these act like shared folders). Vaults can represent different projects, departments, or job levels within your company. However you choose to organize them, vaults can separate and hold information based on the level of permission and the type of data you want to be categorized together.

  • Step two: Create a series of user groups that make the most sense for your company. You might want to organize people based on their department, position, or the projects they’re currently working on. By default, 1Password has three groups: owners, administrators, and team members. You can also assign ‘managers’ within each group, giving them the power to add and remove members. Once you’re happy with your groups, you can start adding employees to them.

  • Step three: Finally, you can take each group and decide which vaults they are able to access, considering the permissions and tools needed for everyone to do their jobs.

Together, groups and vaults give you complete control over who can access what. For example, you could create two user groups called Marketing and Design – representing different departments – and give them access to their own vaults, as well as a shared Creativity Software vault. This way, each department has exactly what they need and nothing more.

Password security and agility: managing access changes

All businesses change over time, and your password manager should be able to adapt and keep up. Need more vaults or groups as your workforce expands? No problem – you can create new ones at any time. Want to reorganize your vaults or groups to accommodate new projects and departments? Change your setup and where users need to go to access shared credentials with just a handful of clicks.

Similarly, people change too. If someone takes on a new role or moves to a different department, 1Password makes it simple to adjust their level of access to fit their new position. It’s everything you need to protect your business without slowing people down. 1Password keeps your company and its sensitive information safe while being flexible enough to support continued growth.

Using 1Password with identity and access management (IAM) software

If you’re a larger business with a lot of employees, you may already use single sign-on (SSO) or an IAM software solution like Okta. As the name implies, SSO allows team members to sign into multiple services using a single, strongly vetted identity .

You can use 1Password and IAM together via the 1Password SCIM bridge. This allows you to complete common tasks in 1Password – like creating new users and groups – right from the dashboard of your preferred IAM provider. That means you can accelerate employee onboarding and stay organized with groups that are synced between 1Password and IAM.

At the moment, the SCIM bridge works with:

  • Okta
  • JumpCloud
  • Rippling
  • OneLogin
  • Azure Active Directory

Combining a password manager with SSO is a great way to protect your company. SSO reduces the number of credentials that team members need to create and manage…but where should they store their strong, difficult-to-memorize SSO password? And what about the sites and services that SSO doesn’t cover yet – along with everything else your team needs to protect, like notes, documents, and credit cards? That’s where 1Password comes in.

Try 1Password for free today and find out just how easy is it to manage levels of user access to passwords and sensitive information.