product icon
View and Manage LastPass Business User Settings

View and Manage LastPass Business User Settings

    Once your users have been added (either manually or via automated provisioning) and they have activated their accounts, you can view and manage various settings for each to build the ideal LastPass Business environment for your organization.

    Note: Are you seeing something different? Learn how to navigate in the new Admin Console.
    Note: Need to change your company's domain and update your LastPass users? Please see these instructions.
    User selected in Admin Console

    Details

    1. Log in with your email address and master password to the Admin Console at https://lastpass.com/company/#!/dashboard.
    2. Click Users in the left navigation.
    3. Click to select your desired user.
    4. Click the Details tab.
    5. Here, the following read-only information is displayed:
      • User created date
      • Last login date and time
      • Total number of Sites for the user
      • Total number of Form Fill profiles for the user
      • Policies that are applied to the user
      • Total number of shared folders for the user
      • Total number of groups to which the user belongs
      • Whether the user has a personal account linked
      • master password security score from the Security Dashboard

    Shared folders

    1. Log in with your email address and master password to the Admin Console at https://lastpass.com/company/#!/dashboard.
    2. Click Users in the left menu.
    3. Click to select your desired user.
    4. Click the Shared folders tab.
    5. Here, the following read-only information is displayed:
      • Name of the shared folder(s) to which the user has access
      • The status of their permissions for each shared folder
      • Total number of users accessing the shared folder

    Sites

    1. Log in with your email address and master password to the Admin Console at https://lastpass.com/company/#!/dashboard.
    2. Click Users in the left menu.
    3. Click to select your desired user.
    4. Click the Sites tab.
    5. The following read-only information is displayed:
      • Name of the Sites the user has saved

    Groups

    1. Log in with your email address and master password to the Admin Console at https://lastpass.com/company/#!/dashboard.
    2. Click Users in the left menu.
    3. Click to select your desired user.
    4. Click the Groups tab.
    5. Here, the following read-only information is displayed:
      • Name of the group to which the user belongs
      • Master password security score from the Security Dashboard
      • Total number of users within the group

    Trusted devices

    1. Log in with your email address and master password to the Admin Console at https://lastpass.com/company/#!/dashboard.
    2. Click Users in the left menu.
    3. Click to select your desired user.
    4. Click the Trusted devices tab.
    5. Here, the following information is displayed:
      • Trusted mobile device type
      • UUID or label assigned to the mobile device
      • Whether trust is enabled/disabled for the device
        • Click Edit to change the status and click Save when finished, or click Delete the trusted mobile device to remove it.

    User management settings

    1. Log in with your email address and master password to the Admin Console at https://lastpass.com/company/#!/dashboard.
    2. Click Users in the left menu.
    3. Click to select your desired user.
    4. Click the More icon Elipsis in the upper-right corner.
    5. Configuration options will vary depending on your user's account status, as follows:

    Active Users

    • Make or Remove admin – You can promote any number of users to admin status and remove this status at any time. Granting admin rights means that the individual will have full access to the Admin Console.
    • Require password change – This will force the user to manually reset their master password. They will receive the notification to do this the next time the user logs in. Learn more.
    • Destroy all sessions – This will log the user out of all active sessions across all devices.
    • Disable user – Temporarily disable the user’s account making it inaccessible to them but not deleting the account entirely. Please note that disabled user accounts are retained for the lifetime of the account.
    • Delete user – You should weigh the decision carefully about using this option versus the "Remove User from Company" option. Deleting a user will delete that user’s LastPass account entirely. If the user has saved any personal logins or other data to their vault then they will no longer have access to that data.
    • Remove user from company – This option will remove the user from your LastPass Business account, and will delete all shared folders from the user’s account. With this option, the user will continue to have access to their account as a standard LastPass user. Learn more.
    • Disable Multifactor – This will disable all Multifactor Authentication services for the user’s account. If the policy “Prevent Multifactor Disable via Email” is enabled, this option will be the only way for Multifactor Authentication to be disabled.
    • Reset Master Password – If an admin has been set as a Super Admin via "Permit super admins to reset master password" policy, there will be an option for them to change the master password for that particular user. This change will be immediate and the Admin will instantly be prompted to create a new master password for the user's account. Learn more.
    • Edit Active Directory attributes – You can configure default Active Directory attributes, or create your own custom attributes for your user, then click Save when finished. Learn more.
    • Edit name – Assign a nickname to the account that may be more recognizable to you than the user’s email address.
    To assign a Super Admin, you must enable the "Permit super admins to reset master passwords" and/or "Permit super admins to access shared folders" policies, then assign the existing admin to the policy.
    Note: All users you add to the super admin policies must be account administrators in order to be added.

    Invited Users

    • Delete user – You should weigh the decision carefully about using this option versus the "Remove User from Company" option. Deleting a user will delete that user’s LastPass account entirely. If the user has saved any personal logins or other data to their vault then they will no longer have access to that data.
    • Reinvite user – Send another invitation for the user to activate their account.
    • Uninvite user – Revoke the invitation for the user to join your LastPass account.

    Disabled Users

    • Activate user – Change the user's account status to Active.
    • Delete user – You should weigh the decision carefully about using this option versus the "Remove User from Company" option. Deleting a user will delete that user’s LastPass account entirely. If the user has saved any personal logins or other data to their vault then they will no longer have access to that data.
    • Remove user from company – This option will remove the user from your LastPass Business account, and will delete all shared folders from the user’s account. With this option, the user will continue to have access to their account as a standard LastPass user. Learn more.

    Users Awaiting Approval

    For accounts that provision users via the LastPass Active Directory Connector and have configured it to add users as pending rather than automatically active. Select Reject or Approve to change the user's status.