Permissions and settings

Through the Permissions and settings tab you can change specific rights that a user inherits from their role. To do this, select a user and open Permissions and settings tab:

When you save the changes, you will be able to choose whether to apply them to the entire role or create a new role based on the new settings:

General

Here you can grant users access rights to create vaults, view the history of actions related to settings and users, access license info, view and modify the SSO settings and background tasks.

System settings

Here you can grant users the right to view and modify specific groups of System settings.

Vaults

Here you can configure user's access to specific tabs of the vault settings.

LDAP settings

Here you can grant users the right to view and modify LDAP parameters which include adding and deleting servers, registering new users, managing group lists, viewing and configuring synchronization settings.

User management

Here you can grant users access rights to view and modify user management parameters. These include any necessary actions with users and roles, such as creating, deleting, and editing users, changing their authorization type and sending invites.

Role-based user management

This section includes settings that are critical to user management, such as user deletion, ability to reset 2FA or viewing the sessions of any user. You can give access to the enabled settings to any role you need, or enable them for all members of your organization.

Roles

This section lets users view or manage roles and their settings.

Account

Here you can grant users the ability to manage their account, change the interface, use the API, mobile apps, and extension.

Authorization and 2FA settings

Here you can select security policies applied to a user.