Forum Discussion

automationgfg's avatar
automationgfg
New Contributor
4 months ago
Solved

Service Account can manage the Vault for user permission

We are having 500+ Vaults and it's hard to manage the Users manually to add or remove from Vaults on demand if they change the Projects, Do we have a way programatically to update any user's permissi...
CLI
discussion
sdk
troubleshooting
  • 1P_Phil's avatar
    1P_Phil
    4 months ago

    Hi automationgfg​ ,

    Thanks for reaching out. The best way to get this done right now is with a combination of the 1Password CLI and a script (likely Bash/Python) to update the vaults. Here's an article walking you through provisioning for users.

    Example

    op vault user grant --user wendy.appleseed@agilebits.com --vault Prod --permissions allow_editing,allow_managing

    To learn more

    https://developer.1password.com/docs/cli/grant-revoke-vault-permissions 

    Additionally, we have the SCIM bridge that provides a more automated approach, depending on your setup.

    https://support.1password.com/scim/ 

    Thanks,

    Phil

1P_Phil's avatar
1P_Phil
Icon for Moderator rankModerator
4 months ago

Hi automationgfg​ ,

Thanks for reaching out. The best way to get this done right now is with a combination of the 1Password CLI and a script (likely Bash/Python) to update the vaults. Here's an article walking you through provisioning for users.

Example

op vault user grant --user wendy.appleseed@agilebits.com --vault Prod --permissions allow_editing,allow_managing

To learn more

https://developer.1password.com/docs/cli/grant-revoke-vault-permissions 

Additionally, we have the SCIM bridge that provides a more automated approach, depending on your setup.

https://support.1password.com/scim/ 

Thanks,

Phil

  • automationgfg's avatar
    automationgfg
    New Contributor
    4 months ago

    Hi Phil,

    Thanks for replying.

    We are not able to grant permissions using service accout and getting the below error

    op vault user grant --user andr{REDACTED}@graphitefinancial.com --vault hobtl2z3plh{REDACTED} --permissions view_items,create_items,allow_viewing

    [ERROR] 2025/06/28 00:10:21 (403) Forbidden: You aren't authorized to access this resource.

    Thanks,

    Karan