Skip to main content
Role-based access control (RBAC) is available exclusively for Enterprise users. To learn more, contact us.
For an explanation of what each role allows, see Roles & Permissions.

​
Assigning Roles to Users

Go to Settings > Workspace > Users and click on a user to open their details drawer.
  • Vault Role — select the user’s global role from the dropdown.
  • Workspace Access — manage which workspaces the user can access and with what role. Click Add access to select a workspace and assign a workspace role to it. You can add access for multiple workspaces. To change a role on an existing workspace, update it inline. To remove access to a workspace, delete the entry.

​
Managing Teams

Go to Settings > Workspace > Teams to create and manage teams. To create a team, click Create Team, enter a name, and confirm. Once the team exists you can:
  • Add members — select users to add to the team. A user can be a member of multiple teams simultaneously.
  • Remove members — remove them from the team’s member list.
  • Rename the team — update the team’s name at any time.
  • Delete the team — removes the team entirely. This does not deactivate the team’s members or remove their directly assigned roles.

​
Assigning Workspace Access to Teams

Click on a team to open its details. In the Workspace Access section, click Add Workspace to select a workspace and assign a workspace role to the team. You can add access for multiple workspaces, update an existing workspace role inline, or remove access to a workspace entirely. All team members inherit the resulting permissions.