Users and roles

User management

6min

User management provides an easy way to change settings, set authorization methods, manage roles and invite users to your Passwork. To access User management, go to the Settings and users menu.

Document image


The User management page is divided into three sections: users, roles and invites.

Users

This tab contains a list of all Passwork users, including their roles, statuses and authorization types. On the right side of the user list, you will find tools for creating, editing, inviting and deleting users. You can also assign roles to users, remove them from roles and configure specific types of authorization.

Document image


In Passwork version 6.0.2 and higher, you can prevent changes to users during LDAP synchronization using the LDAP synchronization button on the right panel

Roles

Roles are an effective user management tool that lets you configure access rights to vaults and folders. You can create an unlimited number of roles and apply them to any number of users. A user can be associated with multiple roles and roles can be enabled and disabled in a single click.

Document image


You can map Active Directory groups to roles. For each AD group, you can specify one or several roles, so users from a certain group are automatically assigned the specified roles.

Disable role permissions

The Disable role permissions toggle in the list of roles allows you to temporarily revoke the access rights of a specific role.

All users with the deactivated role will automatically lose access to the vaults and folders linked to this role, unless they have another role that grants such access

Invites

Invites are specially generated codes that can be sent to unregistered users.

When creating a invite code, you can set an expiration date and pre-assign roles to the user. This allows users to start using Passwork immediately after registration without needing administrator approval.

Document image