Forum Discussion

nb's avatar
nb
New Contributor
3 months ago
Solved

CISO access to reports

Hi,

I configured my CISO in th Security group to give him rights to view the reports. That's OK.
Unfortunately, in the report, shared vaults appears as "Vault Name unavailable" as indicated below. He can't warn the right people...

How should i make him see the names without giving him access to the vaults?
Chatbot told me that's not possible but it seems strange to me.

Thanks in advance

Nicolas

vault management
  • 1P_SimonH's avatar
    1P_SimonH
    3 months ago

    Hi nb,

    Thanks for joining the 1Password Community. You have a good question!

    Security group team members have different access than owners: They don’t see vault titles they don't have access to. The user has to have owner permissions to see the report and the vault names.  

    Speaking generally and without knowing the specifics of your company, it's common for the CISO to be an Owner. We also often see companies give anyone with an Owner account a second non-Owner account that they use as their 'daily driver.' You might find this article helpful about who should be an Owner.

    Alternatively, some companies do broad communications to staff about issues they see in the reports as a way to prompt employees to remediate things like accounts compromised websites without an Owner having to give specifics.

    I hope this helps and feel free to ask any follow up questions!

2 Replies

  • 1P_SimonH's avatar
    1P_SimonH
    Icon for Community Manager rankCommunity Manager
    3 months ago

    Hi nb,

    Thanks for joining the 1Password Community. You have a good question!

    Security group team members have different access than owners: They don’t see vault titles they don't have access to. The user has to have owner permissions to see the report and the vault names.  

    Speaking generally and without knowing the specifics of your company, it's common for the CISO to be an Owner. We also often see companies give anyone with an Owner account a second non-Owner account that they use as their 'daily driver.' You might find this article helpful about who should be an Owner.

    Alternatively, some companies do broad communications to staff about issues they see in the reports as a way to prompt employees to remediate things like accounts compromised websites without an Owner having to give specifics.

    I hope this helps and feel free to ask any follow up questions!

    • nb's avatar
      nb
      New Contributor
      3 months ago

      Hi,

      Thanks for your answer.

      Have a good day

      Nicolas