Forum Discussion

llamafilm's avatar
llamafilm
Occasional Contributor
1 month ago

Permission to archive without revealing password

I have one particular shared vault where users should be able to create and archive items, but they should not be able to reveal existing passwords.  Is this possible?  The UI at 1password.com suggests that it is, but I can't get it to work.  When I add the archive permission, it automatically adds reveal.  Then when I remove reveal, archive remains enabled.  But it doesn't work; with this config, users cannot archive items. Screen recording showing the issue: https://youtu.be/T64YwgENx0g

1password.com
vault management

1 Reply

  • Tom's avatar
    Tom
    Bronze Expert
    1 month ago

    What would be the benefit of creating but never viewing passwords? If you are only worried about 'revealing' they would still be able to copy them? The 1password business options for vault access should show the below and indeed 'remove all other options' once you remove view. Also there isn't a specific reveal/anti-copy+paste. I.e. if people are able to 'see' the item, (which they would need to be able to archive them) the can also view the items details, such as the password.

    I might be misinterpreting what you are aiming for, but I don't think it's possible that way, it might be a use-case to have a physical equivalent of allowing to put something in the envelope and shredding it - but not allow them to look inside. Then again, if they physically hold it, how would one prevent them  from opening, then shredding, then adding as a new envelope? Even if it would be possible to digitally not allow them to see the contents, maybe consider them not having access to it at all?