It’s Cybersecurity Awareness Month! Join our interactive training session, or learn about security and AI from 1Password experts.
Forum Discussion
View access of vault details for subaccounts (staff)
How can non-owning members of vaults get to the vault details page to review which team members also have access to that vault? This should be possible for any members of a vault who have view access...
In this case, it's here (via browser page since such details are not presently available on the app—something that also needs to be fixed):
[business team].1password.com > Vaults > [Specific vault details page]
As an admin and the account creator/owner, I see all the details of a vault. However, when staff try to view the details (specifically which other staff also have access) of that vault, they can't see them.
I recently had to tell a staff member which vault to use because he couldn't see who had access to which vaults. If staff members have been added to particular vaults, even if they can't make changes, those members should at least be able to see the details of which other staff members have been given access to that same vault. This should be the default view for vault information.
This is a workflow issue, and doesn't scale with me having to inform people of who has access to which vaults simply because 1Password has made such information hidden to standard users (at least in business accounts). This needs to be fixed.
It wouldn't be an issue if I, as owner and admin, were to have the ability to hide/reveal such member visibility via a toggle option for a vault.
1P_Dave
Moderator
ModeratorThank for the reply! Your team members who see who has access to a vault by following these steps:
- Open and unlock the 1Password app.
- Open an item in the vault that you'd like to check.
- Click or tap on the vault name at the top of the item's details.
You should see a list of all users and groups that have access to that item and the vault that contains the item.
Would that provide a solution for you and your users? Or would you like to see this information surfaced elsewhere?
-Dave
Ok, I’m glad there is SOME kind of solution. But this is relatively suboptimal and counter-intuitive.
The setting of who has access to particular shared credentials is maintained at the vault level. For that data about the containing vault to ONLY be revealed to end users within credentials contained inside that vault requires that they look in a place that doesn’t make sense.
In order to manage the users with which a vault’s contents are shared, we can’t use the mobile app, and are required to log in to the 1Password website, find the vault and edit who can use it. That access and information is, again, limited only to the vault owner. (It’s not clear why this vault shared access management functionality is not available in the mobile app directly, but that’s a different interface subject.)
The question remains... if you look at the credential in the location that you specified in step 3, why is that very information not available for review at the vault level?
Team members are running into this situation: “I need to share this new credential with the right team members, so which of these vaults has the right set of members?” Because they know that such shared access is set and maintained at the vault level, so that's where their search has been focusing. Naturally.
A staff member should be able to scroll down through the vaults and easily see (“tap or click on the vault name”, as you said, but at the vault level) the same list of who has access to which vaults. To require them to first go into each vault, then click on a random credential to learn who has access to the VAULT that contains that credential is suboptimal and counterintuitive.
I know because I’ve been on the phone with staff as they work through trying to find this information, and I’ve heard them speak how they’re thinking it through.
The interface needs to match our natural inclinations, not force us to memorize unintuitive steps.
