product icon

Manage custom admin levels in the new Admin Console

    Split up admin responsibilities by creating custom admin levels so that admins can perform personalized tasks in the new Admin Console.

    Create a new custom admin level

    You can create a new custom admin level with specific customized permissions.

    Attention: In order to create a custom admin level, you need to be an admin or a super admin with a permission to modify admin levels.
    1. Log in with your email address and master password to access the new Admin Console at https://admin.lastpass.com.
    2. If prompted, complete steps for multifactor authentication (if it is enabled for your account).
    3. Go to Users > Admin levels.
    4. Click New admin level.

      The New admin level pane appears.

      New admin level
    5. Enter a name for the new custom admin level.
      Note: The custom admin level name must be unique, and less than 300 characters in length.
    6. Optional: Enter a description of the custom admin level.
    7. In Permissions, choose which permissions to assign the admin level, then click either Modify or View. Learn more about the different permissions available for custom admins.
      Tip: Hover over the View and Modify checkboxes of any permission category to find out what each permission does.
    8. To save permissions and assign users, click Save & assign.
      Alternatively, to save your changes and stop editing details of your new custom admin level, click Save & exit. You can return to your custom admin level and continue editing anytime.

      If you clicked Save & assign, the Assign users drawer appears.

      Assign users
    9. To assign users, select your desired users to add to this custom admin level. You can use the search field to find specific users.
      Note: You can assign a user to only one (1) admin level at a time. The most recently assigned level will be activated.
    10. Click Assign users.
    Results: You have created a new custom admin level with permissions and users.

    Edit an existing custom admin level

    About this task: In some cases, you may have to make changes to a custom admin level that is already in place (for example, you wish to modify permissions or add/remove users).
    1. Log in with your email address and master password to access the new Admin Console at https://admin.lastpass.com.
    2. If prompted, complete steps for multifactor authentication (if it is enabled for your account).
    3. Go to Users > Admin levels.
    4. Click your custom admin level in the list of admin levels displayed on screen.
      A drawer displaying your custom admin level appears.
    5. To add a new user:
      1. Click Assign users.
        Add a new user

        The Assign users pane is displayed.

      2. Select your desired users to add to this custom admin level. You can use the search field to find specific users.
        Note: You can assign a user to only one (1) admin level at a time. The most recently assigned level will be activated.
      3. Click Assign users.
    6. To remove a user:
      1. Click View & edit all users.
        View and edit all users

        The Users pane appears.

      2. Select the users that you wish to remove.
      3. Click Remove User.
    7. To edit the permissions assigned to your custom admin level:
      1. Select More options and Edit admin level details.
        Edit custom admin level
      2. Expand the Permissions pane (if the pane is collapsed).
      3. Select or clear permissions checkboxes.
      4. Once you have made your changes, click Save changes.
    8. To edit the name or description of your custom admin level, once you are on the pane displaying your custom admin level:
      1. Select More options and Edit admin level details.
      2. Edit the Admin level name and/or Description fields.
      3. Select Save changes.

    How do I remove a custom admin level?

    About this task: In some cases, you might want to assign custom admin permissions to someone on a temporary basic, for a specific task only. When the custom admin has completed their task, you can remove the custom admin level created for that task.
    1. Log in with your email address and master password to access the new Admin Console at https://admin.lastpass.com.
    2. If prompted, complete steps for multifactor authentication (if it is enabled for your account).
    3. Go to Users > Admin levels.
    4. Click your custom admin level in the list of admin levels displayed on screen.
      A pane displaying your custom admin level appears.
    5. To remove the custom admin level:
      1. Select More options and Delete admin level.
      2. Select Delete.
    Results: You have successfully removed your custom admin level.