diff --git a/_articles/organizations/user-types-access-control.md b/_articles/organizations/user-types-access-control.md new file mode 100644 index 00000000..b3cab717 --- /dev/null +++ b/_articles/organizations/user-types-access-control.md @@ -0,0 +1,54 @@ +--- +layout: article +title: User Types and Access Control +categories: [organizations] +featured: false +popular: false +hidden: false +tags: [user types, access control] +--- + +## User Types + +When adding users to your Bitwarden Organization, you can grant certain levels of access by user type. Options include Owner, Admin, Manager and User. See further details below: + +### User +- Most common user type +- Only have access to assigned collections +- Consumers of shared items in addition to their individual vault items +- Only work with items under collections they have been associated with +- Unable to create collections + +### Manager +- Only administer a collection it is associated with by an Owner or Admin +- Access and manage assigned collections in an organization +- Create new collections and modify the assigned collections +- Able to set user access for assigned collections + +### Admin +- Access and manage all items, collections, and users in your organization +- Invite and confirm users to join an organization +- Manage Enterprise Policies +- Manage Groups +- View Event Logs +- Export organization vault data +- Normally only a few select Admins in an organization + +### Owner +- Highest level of access +- Manage all aspects of the organization +- Manage billing, subscription, and integration mechanisms +- Normally only a few select Owners in an organization + +{% note %} +Once the user or user’s group is saved with their Collections access, the user will inherit those items into their Vault view. +{% endnote %} + +## Access Control +In addition to defining the User Type, Access Control determines a full or partial view of the collections within an organization. + +Choose **all items** or **selected collections** to set the appropriate access. + +Choose **read only** for the appropriate collections. + +{% image organizations/user-types-access-control.png %} diff --git a/images/organizations/user-types-access-control.png b/images/organizations/user-types-access-control.png new file mode 100644 index 00000000..c87077bf Binary files /dev/null and b/images/organizations/user-types-access-control.png differ