Users and roles

User management

7min

User management provides an easy way to change settings, set authorization methods, manage roles and invite users to your Passwork. To access User management, go to the Settings and users menu.

Document image


The User management page is divided into three sections: users, roles and invites.

Users

This tab contains a list of all Passwork users, including their roles, statuses and authorization types. On the right side of the user list, you will find tools for creating, editing, inviting and deleting users. You can also assign roles to users, remove them from roles and configure specific types of authorization.

Document image


1. Find users using the search bar and filters 2. View the list of users, including their roles, statuses and authorization types 3. Create or invite new users 4. Manage roles, authorization methods or delete users

In Passwork version 6.0.2 and higher, you can prevent changes to users during LDAP synchronization using the LDAP synchronization button on the right panel

Roles

Roles are an effective user management tool that lets you configure access rights to vaults and folders. You can create an unlimited number of roles and apply them to any number of users. A user can be associated with multiple roles and roles can be enabled and disabled in a single click.

Document image


1. Use the search bar to quickly find a role 2. View the list of roles, showing the number of users and vaults assigned to each, use toggles to quickly enable or disable roles 3. Click Add role to create a new role

You can map Active Directory groups to roles. For each AD group, you can specify one or several roles, so users from a certain group are automatically assigned the specified roles.

Disable role permissions

The Disable role permissions toggle in the list of roles allows you to temporarily revoke the access rights of a specific role.

All users with the deactivated role will automatically lose access to the vaults and folders linked to this role, unless they have another role that grants such access

Invites

Invites are specially generated codes that can be sent to unregistered users.

When creating a invite code, you can set an expiration date and pre-assign roles to the user. This allows users to start using Passwork immediately after registration without needing administrator approval.

Document image


1. Passwork registration link 2. Use the search bar to quickly find an invite 3. List of invites, including assigned roles and the number of registered users 4. Click Create invite to set up a new invite 5. Delete selected invites if needed