mirror of
https://github.com/bitwarden/help
synced 2026-01-01 08:03:28 +00:00
add article back into URL for launch
This commit is contained in:
DanHillesheim
@@ -13,6 +13,6 @@ The Bitwarden Business Portal is a dedicated space for administrators to configu
|
||||
|
||||
{% image organizations/business-portal-button-overlay.png Business Portal button %}
|
||||
|
||||
The Bitwarden Business Portal provides access to configuration for [Single Sign-On]({{site.baseurl}}/about-sso/) and [Policies]({{site.baseurl}}/policies/) for your Organization.
|
||||
The Bitwarden Business Portal provides access to configuration for [Single Sign-On]({{site.baseurl}}/article/about-sso/) and [Policies]({{site.baseurl}}/article/policies/) for your Organization.
|
||||
|
||||
{% image organizations/business-portal.png Bitwarden Business Portal %}
|
||||
|
||||
@@ -7,15 +7,15 @@ popular: false
|
||||
tags: [collections, access control, best practices]
|
||||
order: "02"
|
||||
redirect_from:
|
||||
- /collections/
|
||||
- /create-collections/
|
||||
- /article/collections/
|
||||
- /article/create-collections/
|
||||
---
|
||||
|
||||
## What are Collections?
|
||||
|
||||
Collections gather together Logins, Notes, Cards, and Identities for [secure sharing]({{site.baseurl}}/sharing/) from an Organization. Think of Collections as Organization-equivalents to the [Folders]({{site.baseurl}}/folders/) used to organize a Personal Vault, with a few key differences:
|
||||
Collections gather together Logins, Notes, Cards, and Identities for [secure sharing]({{site.baseurl}}/article/sharing/) from an Organization. Think of Collections as Organization-equivalents to the [Folders]({{site.baseurl}}/article/folders/) used to organize a Personal Vault, with a few key differences:
|
||||
|
||||
- Organizations control access to Organization-owned items by assigning users or [Groups]({{site.baseurl}}/about-groups/) to Collections.
|
||||
- Organizations control access to Organization-owned items by assigning users or [Groups]({{site.baseurl}}/article/about-groups/) to Collections.
|
||||
- Organization-owned items **must** be included in at least one Collection.
|
||||
|
||||
### Using Collections
|
||||
@@ -24,7 +24,7 @@ For many Organizations, using Collections means adding a set of Vault items and
|
||||
|
||||
{% image organizations/collections-graphic-1.png Using Collections %}
|
||||
|
||||
Teams and Enterprise Organizations can also designate access to Collections based on user [Groups]({{site.baseurl}}/about-groups/), rather than individual users. Group-Collection associations provide a deeper level of access control and scalability to sharing resources. One common Group-Collection methodology is to create **Groups by Department** and **Collections by Function**, for example:
|
||||
Teams and Enterprise Organizations can also designate access to Collections based on user [Groups]({{site.baseurl}}/article/about-groups/), rather than individual users. Group-Collection associations provide a deeper level of access control and scalability to sharing resources. One common Group-Collection methodology is to create **Groups by Department** and **Collections by Function**, for example:
|
||||
|
||||
{% image organizations/collections-graphic-2.png Using Collections with Groups%}
|
||||
|
||||
@@ -32,15 +32,15 @@ Other common methodologies include **Collections by Vendor or System** (i.e. use
|
||||
|
||||
## Create a Collection
|
||||
|
||||
Organization [Managers (or higher)]({{site.baseurl}}/user-types-access-control/) and [Provider Users]({{site.baseurl}}/provider-users/provider-user-types) can create and manage Collections. To create a Collection:
|
||||
Organization [Managers (or higher)]({{site.baseurl}}/article/user-types-access-control/) and [Provider Users]({{site.baseurl}}/article/provider-users/provider-user-types) can create and manage Collections. To create a Collection:
|
||||
|
||||
1. Log in to your [Web Vault](https://vault.bitwarden.com){:target="\_blank"} and open your Organization.
|
||||
2. Open the **Manage** tab and select the {% icon fa-plus %} **New Collection** button:
|
||||
|
||||
{% image organizations/collection-list-overlay.png Select New Collection %}
|
||||
3. Give your Collection a **Name** and, if you're a Teams or Enterprise Organization, assign **Group Access** to any existing [Group]({{site.baseurl}}/about-groups/).
|
||||
3. Give your Collection a **Name** and, if you're a Teams or Enterprise Organization, assign **Group Access** to any existing [Group]({{site.baseurl}}/article/about-groups/).
|
||||
|
||||
{% callout success %}The **External Id** field is only relevant if you're using [Directory Connector]({{site.baseurl}}/directory-sync/).{% endcallout %}
|
||||
{% callout success %}The **External Id** field is only relevant if you're using [Directory Connector]({{site.baseurl}}/article/directory-sync/).{% endcallout %}
|
||||
4. Select **Save** to finish creating your Collection.
|
||||
|
||||
### Nested Collections
|
||||
|
||||
@@ -7,21 +7,21 @@ popular: false
|
||||
tags: [groups, access control]
|
||||
order: "03"
|
||||
redirect_from:
|
||||
- /groups/
|
||||
- /create-groups/
|
||||
- /article/groups/
|
||||
- /article/create-groups/
|
||||
---
|
||||
|
||||
## What are Groups?
|
||||
|
||||
Groups relate together individual users, and provide a scalable way to assign permissions, including access to [Collections]({{site.baseurl}}/about-collections) and other [access controls]({{site.baseurl}}/user-types-access-control/#access-control). When [onboarding new users]({{site.baseurl}}/managing-users/), add them to a Group to have them automatically inherit that Group's configured permissions.
|
||||
Groups relate together individual users, and provide a scalable way to assign permissions, including access to [Collections]({{site.baseurl}}/article/about-collections) and other [access controls]({{site.baseurl}}/article/user-types-access-control/#access-control). When [onboarding new users]({{site.baseurl}}/article/managing-users/), add them to a Group to have them automatically inherit that Group's configured permissions.
|
||||
|
||||
{% callout info %}
|
||||
Groups are available to [Teams and Enterprise Organizations]({{site.baseurl}}/about-organizations/#types-of-organizations).
|
||||
Groups are available to [Teams and Enterprise Organizations]({{site.baseurl}}/article/about-organizations/#types-of-organizations).
|
||||
{% endcallout %}
|
||||
|
||||
### Using Groups
|
||||
|
||||
Teams and Enterprise Organizations can designate access to [Collections]({{site.baseurl}}/about-collections/) based on user Groups, rather than individual users. Group-Collection associations provide a deep level of access control and scalability to sharing resources. One common Group-Collection methodology is to create **Groups by Department** and **Collections by Function**, for example:
|
||||
Teams and Enterprise Organizations can designate access to [Collections]({{site.baseurl}}/article/about-collections/) based on user Groups, rather than individual users. Group-Collection associations provide a deep level of access control and scalability to sharing resources. One common Group-Collection methodology is to create **Groups by Department** and **Collections by Function**, for example:
|
||||
|
||||
{% image organizations/collections-graphic-2.png Using Collections with Groups%}
|
||||
|
||||
@@ -29,18 +29,18 @@ Other common methodologies include **Collections by Vendor or System** (i.e. use
|
||||
|
||||
## Create a Group
|
||||
|
||||
Organization [Admins (or higher)]({{site.baseurl}}/user-types-access-control/#user-types) and [Provider Users]({{site.baseurl}}/provider-users/provider-user-types) can create and manage Groups. To create a Group:
|
||||
Organization [Admins (or higher)]({{site.baseurl}}/article/user-types-access-control/#user-types) and [Provider Users]({{site.baseurl}}/article/provider-users/provider-user-types) can create and manage Groups. To create a Group:
|
||||
|
||||
1. Log in to your [Web Vault](https://vault.bitwarden.com){:target="\_blank"} and open your Organization.
|
||||
2. Open the **Manage** tab and select **Groups** from the left-hand menu.
|
||||
3. On the Groups screen, select the {% icon fa-plus %} **New Group** button.
|
||||
|
||||
{% image organizations/groups-newgroup.png New Group %}
|
||||
4. Give your Group a **Name** and assign the desired [Access Control]({{site.baseurl}}/user-types-access-control/#access-control).
|
||||
4. Give your Group a **Name** and assign the desired [Access Control]({{site.baseurl}}/article/user-types-access-control/#access-control).
|
||||
|
||||
Access Controls can designate that users can access all items (i.e. all Collections) or only specific Collections, as well as whether [Passwords are hidden or Logins are read-only]({{site.baseurl}}/user-types-access-control/#granular-access-control).
|
||||
Access Controls can designate that users can access all items (i.e. all Collections) or only specific Collections, as well as whether [Passwords are hidden or Logins are read-only]({{site.baseurl}}/article/user-types-access-control/#granular-access-control).
|
||||
|
||||
{% callout success %}The **External Id** field is only relevant if you're using [Directory Connector]({{site.baseurl}}/directory-sync/).{% endcallout %}
|
||||
{% callout success %}The **External Id** field is only relevant if you're using [Directory Connector]({{site.baseurl}}/article/directory-sync/).{% endcallout %}
|
||||
5. Select **Save** to finish creating your Group.
|
||||
|
||||
### Assign Users to Group(s)
|
||||
@@ -59,7 +59,7 @@ You can check which users belong to a Group from the **Manage** → **Groups*
|
||||
|
||||
### Edit Collections Assignments
|
||||
|
||||
If you want to change the [Collections]({{site.baseurl}}/about-collections/) or [access controls]({{site.baseurl}}/user-types-access-control/#access-control) assigned to a Group:
|
||||
If you want to change the [Collections]({{site.baseurl}}/article/about-collections/) or [access controls]({{site.baseurl}}/article/user-types-access-control/#access-control) assigned to a Group:
|
||||
|
||||
1. In your Organization Vault, open the **Manage** tab and select **Groups** from the left-hand menu.
|
||||
2. Select the group you want to edit.
|
||||
|
||||
@@ -7,40 +7,40 @@ popular: true
|
||||
tags: [organizations]
|
||||
order: "01"
|
||||
redirect_from:
|
||||
- /what-is-an-organization/
|
||||
- /create-an-organization/
|
||||
- /article/what-is-an-organization/
|
||||
- /article/create-an-organization/
|
||||
---
|
||||
|
||||
## What are Organizations?
|
||||
|
||||
Organizations relate Bitwarden users and Vault items together for [secure sharing]({{site.baseurl}}/sharing/) of Logins, Notes, Cards, and Identities. Organizations have a unique Vault, where [administrators]({{site.baseurl}}/user-types-access-control/) can manage the Organization's items, users, and settings:
|
||||
Organizations relate Bitwarden users and Vault items together for [secure sharing]({{site.baseurl}}/article/sharing/) of Logins, Notes, Cards, and Identities. Organizations have a unique Vault, where [administrators]({{site.baseurl}}/article/user-types-access-control/) can manage the Organization's items, users, and settings:
|
||||
|
||||
{% image organizations/org-vault-admin.png Organization Vault %}
|
||||
|
||||
Members of an Organization will find shared items ({% icon fa-cube%}) in their **My Vault** view alongside personal items, as well as filters for assigned [Collections]({{site.baseurl}}/about-collections/), which group Organization items similarly to how [Folders]({{site.baseurl}}/folders/) organize personal items:
|
||||
Members of an Organization will find shared items ({% icon fa-cube%}) in their **My Vault** view alongside personal items, as well as filters for assigned [Collections]({{site.baseurl}}/article/about-collections/), which group Organization items similarly to how [Folders]({{site.baseurl}}/article/folders/) organize personal items:
|
||||
|
||||
{% image organizations/personal-vault-org-enabled.png Access shared items %}
|
||||
|
||||
### Types of Organizations
|
||||
|
||||
Bitwarden offers a variety of types of Organizations to meet your business's or family's needs. For feature-by-feature breakdowns of each Organization type, see [About Bitwarden Plans]({{site.baseurl}}/about-bitwarden-plans/).
|
||||
Bitwarden offers a variety of types of Organizations to meet your business's or family's needs. For feature-by-feature breakdowns of each Organization type, see [About Bitwarden Plans]({{site.baseurl}}/article/about-bitwarden-plans/).
|
||||
|
||||
|Type|Description|
|
||||
|----|-----------|
|
||||
|Free Organizations|Free Organizations allow 2 users to securely share in up to 2 [Collections]({{site.baseurl}}/about-collections/).|
|
||||
|Families Organizations|Families Organizations allow 6 users to securely share in unlimited [Collections]({{site.baseurl}}/about-collections/).|
|
||||
|Teams Organizations|Teams Organizations allow unlimited users (*billed Per User Per Month*) to securely share in unlimited [Collections]({{site.baseurl}}/about-collections/) and offer a suite of operational tools like [Event Logs]({{site.baseurl}}/event-logs/).|
|
||||
|Enterprise Organizations|Enterprise Organizations allow unlimited users (*billed Per User Per Month*) to securely share in unlimited [Collections]({{site.baseurl}}/about-collections/) and add enterprise-only features like [Login with SSO]({{site.baseurl}}/about-sso/) and [Policies]({{site.baseurl}}/policies/) to Bitwarden's suite of operational tools.|
|
||||
|Free Organizations|Free Organizations allow 2 users to securely share in up to 2 [Collections]({{site.baseurl}}/article/about-collections/).|
|
||||
|Families Organizations|Families Organizations allow 6 users to securely share in unlimited [Collections]({{site.baseurl}}/article/about-collections/).|
|
||||
|Teams Organizations|Teams Organizations allow unlimited users (*billed Per User Per Month*) to securely share in unlimited [Collections]({{site.baseurl}}/article/about-collections/) and offer a suite of operational tools like [Event Logs]({{site.baseurl}}/article/event-logs/).|
|
||||
|Enterprise Organizations|Enterprise Organizations allow unlimited users (*billed Per User Per Month*) to securely share in unlimited [Collections]({{site.baseurl}}/article/about-collections/) and add enterprise-only features like [Login with SSO]({{site.baseurl}}/article/about-sso/) and [Policies]({{site.baseurl}}/article/policies/) to Bitwarden's suite of operational tools.|
|
||||
|
||||
### Comparing Organizations with Premium
|
||||
|
||||
The key thing to know is that Organizations enable **secure sharing from Organizations to users**. [Premium Individual plans]({{site.baseurl}}/about-bitwarden-plans/#premium-individual) unlock premium password security and management features, including advanced 2FA options, the Bitwarden Authenticator (TOTP), encrypted file attachments, and more, but Premium Individual **does not include secure data sharing.**
|
||||
The key thing to know is that Organizations enable **secure sharing from Organizations to users**. [Premium Individual plans]({{site.baseurl}}/article/about-bitwarden-plans/#premium-individual) unlock premium password security and management features, including advanced 2FA options, the Bitwarden Authenticator (TOTP), encrypted file attachments, and more, but Premium Individual **does not include secure data sharing.**
|
||||
|
||||
Paid Organizations (Families, Teams, or Enterprise) automatically include those premium features (advanced 2FA options, Bitwarden Authenticator (TOTP), etc.) for **every** user enrolled in the Organization.
|
||||
|
||||
### Comparing Organizations with Providers
|
||||
|
||||
[Providers]({{site.baseurl}}/providers) are Vault-administration entities that allow businesses like Managed Service Providers (MSPs) to quickly create and administer **multiple Bitwarden Organizations** on behalf of business customers.
|
||||
[Providers]({{site.baseurl}}/article/providers) are Vault-administration entities that allow businesses like Managed Service Providers (MSPs) to quickly create and administer **multiple Bitwarden Organizations** on behalf of business customers.
|
||||
|
||||
## Create an Organization
|
||||
|
||||
@@ -52,16 +52,16 @@ Organizations are created and managed from the [Web Vault](https://vault.bitward
|
||||
2. Enter an **Organization Name** and a **Billing Email** we can reach you at.
|
||||
|
||||
Checking the **This account is owned by a business** checkbox will filter your options down to those suitable for businesses, and prompt your for a **Business name** so we know who to thank!
|
||||
3. **Choose your Plan**. Bitwarden offers Organizations suited to any need. Check out the [feature-by-feature breakdown]({{site.baseurl}}/about-bitwarden-plans/#compare-the-plans-1) to figure out which is best for you.
|
||||
3. **Choose your Plan**. Bitwarden offers Organizations suited to any need. Check out the [feature-by-feature breakdown]({{site.baseurl}}/article/about-bitwarden-plans/#compare-the-plans-1) to figure out which is best for you.
|
||||
|
||||
{% callout success %}All paid Organization (Families, Teams, or Enterprise) include premium features for all enrolled users!{% endcallout %}
|
||||
4. If you chose a **Free Organization**, you're all set! If you chose one of our paid Organizations,
|
||||
|
||||
- **Families/Teams/Enterprise:** Your plan comes with 1GB of encrypted [storage for attachments]({{site.baseurl}}/attachments/). Add **Additional Storage (GB)** for $0.33 per GB per month.
|
||||
- **Families/Teams/Enterprise:** Your plan comes with 1GB of encrypted [storage for attachments]({{site.baseurl}}/article/attachments/). Add **Additional Storage (GB)** for $0.33 per GB per month.
|
||||
- **Teams/Enterprise:** Specify the number of **User Seats** you need for your Organization. You can always add more seats later.
|
||||
- **Teams/Enterprise:** Choose whether you'd like to be billed **Annually** or **Monthly**. Families Organizations can only be billed annually.
|
||||
5. Once you're happy with your Organization, enter your **Payment Information** and select **Submit**.
|
||||
|
||||
{% callout success %}New Families, Teams, and Enterprise Organization have a 7 day free trial built in! We won't charge you until your trial is over, and you can cancel your subscription at any time from the Organization **Settings** tab.{% endcallout %}
|
||||
|
||||
Once you've created your Organization, create a [collection]({{site.baseurl}}/about-collections/), [invite users]({{site.baseurl}}/managing-users/), and [start sharing]({{site.baseurl}}/sharing).
|
||||
Once you've created your Organization, create a [collection]({{site.baseurl}}/article/about-collections/), [invite users]({{site.baseurl}}/article/managing-users/), and [start sharing]({{site.baseurl}}/article/sharing).
|
||||
|
||||
@@ -9,16 +9,16 @@ order: "15"
|
||||
---
|
||||
|
||||
{% callout info %}
|
||||
Admin Password Reset is available for **Enterprise Organizations** on a current plan. Like Login with SSO, Password Reset is not available to [Classic 2019 Enterprise Organizations]({{site.baseurl}}/2020-plan-updates).
|
||||
Admin Password Reset is available for **Enterprise Organizations** on a current plan. Like Login with SSO, Password Reset is not available to [Classic 2019 Enterprise Organizations]({{site.baseurl}}/article/2020-plan-updates).
|
||||
{% endcallout %}
|
||||
|
||||
## What is Admin Password Reset?
|
||||
|
||||
Admin Password Reset allows [designated administrators](#permissions) to recover Enterprise Organization user accounts and restore access in the event that an employee forgets their [Master Password]({{site.baseurl}}/master-password/). Admin Password Reset can be activated for an Organization by [enabling the Admin Password Reset Policy](#activate-admin-password-reset).
|
||||
Admin Password Reset allows [designated administrators](#permissions) to recover Enterprise Organization user accounts and restore access in the event that an employee forgets their [Master Password]({{site.baseurl}}/article/master-password/). Admin Password Reset can be activated for an Organization by [enabling the Admin Password Reset Policy](#activate-admin-password-reset).
|
||||
|
||||
Individual users must be enrolled (either through [self-enrollment](#self-enroll-in-password-reset) or using the [automatic enrollment policy option](#automatic-enrollment)) to be eligible for password reset, as enrollment triggers the key exchange that makes Admin Password Reset secure.
|
||||
|
||||
**Admin Password Reset does not bypass Two-step Login or Login with SSO**. If a [Two-step Login method]({{site.baseurl}}/setup-two-step-login/) is enabled for the account or if your Organization [requires SSO Authentication]({{site.baseurl}}/policies/#single-sign-on-authentication), you will still be required to use that method to access your Vault after password reset.
|
||||
**Admin Password Reset does not bypass Two-step Login or Login with SSO**. If a [Two-step Login method]({{site.baseurl}}/article/setup-two-step-login/) is enabled for the account or if your Organization [requires SSO Authentication]({{site.baseurl}}/article/policies/#single-sign-on-authentication), you will still be required to use that method to access your Vault after password reset.
|
||||
|
||||
### Encryption
|
||||
|
||||
@@ -32,12 +32,12 @@ The key pair is generated and encrypted client-side upon creation of a new Organ
|
||||
- Upgrades from one Organization type to another.
|
||||
{% endcallout %}
|
||||
|
||||
When a member of the Organization [enrolls](#automatic-enrollment) in Admin Password Reset, that user's [encryption key]({{site.baseurl}}/account-encryption-key) is encrypted with the Organization's public key. The result is stored as the **Password Reset Key**.
|
||||
When a member of the Organization [enrolls](#automatic-enrollment) in Admin Password Reset, that user's [encryption key]({{site.baseurl}}/article/account-encryption-key) is encrypted with the Organization's public key. The result is stored as the **Password Reset Key**.
|
||||
|
||||
When an Admin Password Reset action is taken:
|
||||
|
||||
1. The Organization private key is decrypted with the Organization symmetric key.
|
||||
2. The user's **Reset Password Key** is decrypted with the decrypted Organization private key, resulting in the users's [encryption key]({{site.baseurl}}/account-encryption-key).
|
||||
2. The user's **Reset Password Key** is decrypted with the decrypted Organization private key, resulting in the users's [encryption key]({{site.baseurl}}/article/account-encryption-key).
|
||||
3. The user's encryption key and Master Password hash are replaced with a *new* encryption key and *new* Master Password hash, seeded from a new Master Password.
|
||||
4. The user's new encryption key is encrypted with the Organization's public key, replacing the previous **Password Reset Key** with a new one.
|
||||
|
||||
@@ -45,21 +45,21 @@ When an Admin Password Reset action is taken:
|
||||
|
||||
### Permissions
|
||||
|
||||
Admin Password Reset can be executed by [Owners, Admins, and permitted Custom users]({{site.baseurl}}/user-types-access-control/). Admin Password Reset uses a hierarchical permission structure to determine who can reset whose Master Password, meaning:
|
||||
Admin Password Reset can be executed by [Owners, Admins, and permitted Custom users]({{site.baseurl}}/article/user-types-access-control/). Admin Password Reset uses a hierarchical permission structure to determine who can reset whose Master Password, meaning:
|
||||
- Any Owner, Admin, or permitted Custom user can reset a **User**, **Manager**, or **Custom User**'s Master Password.
|
||||
- Only an Admin or Owner can reset an **Admin**'s Master Password.
|
||||
- Only an Owner can reset another **Owner**'s Master Password.
|
||||
|
||||
### Event Logging
|
||||
|
||||
[Events]({{site.baseurl}}/event-logs/) are logged when:
|
||||
[Events]({{site.baseurl}}/article/event-logs/) are logged when:
|
||||
- A Master Password is reset.
|
||||
- A user enrolls in Admin Password Reset.
|
||||
- A user withdraws from Admin Password Reset.
|
||||
|
||||
## Activate Admin Password Reset
|
||||
|
||||
To activate Master Password Reset for your Enterprise Organization, navigate to the [Business Portal]({{site.baseurl}}/about-business-portal/) and enable the [Master Password Reset Policy]({{site.baseurl}}/policies/#master-password-reset):
|
||||
To activate Master Password Reset for your Enterprise Organization, navigate to the [Business Portal]({{site.baseurl}}/article/about-business-portal/) and enable the [Master Password Reset Policy]({{site.baseurl}}/article/policies/#master-password-reset):
|
||||
|
||||
{% image organizations/pwreset-activate.png Activate Password Reset %}
|
||||
|
||||
@@ -67,7 +67,7 @@ Users will need to [self-enroll](#self-enroll-in-password-reset) or [be auto-enr
|
||||
|
||||
### Automatic Enrollment
|
||||
|
||||
Enabling the Automatic Enrollment policy option will automatically enroll new users in Admin Password Reset when their [invitation to the Organization is accepted]({{site.baseurl}}/managing-users/#accept). Users already in the Organization will not be retroactively enrolled in Admin Password Reset, and will be required to [self-enroll](#self-enroll-in-password-reset).
|
||||
Enabling the Automatic Enrollment policy option will automatically enroll new users in Admin Password Reset when their [invitation to the Organization is accepted]({{site.baseurl}}/article/managing-users/#accept). Users already in the Organization will not be retroactively enrolled in Admin Password Reset, and will be required to [self-enroll](#self-enroll-in-password-reset).
|
||||
|
||||
{% callout success %}
|
||||
If you're automatically enrolling Organization members in Admin Password Reset, we **highly recommend notifying them of this feature**. Many Bitwarden Organization users store personal credentials in their Personal Vault, and should be made aware that Admin Password Reset could allow an administrator to access their Personal Vault.
|
||||
@@ -87,7 +87,7 @@ Once enrolled, you can **Withdraw** from Password Reset from the same dropdown u
|
||||
|
||||
{% image organizations/pwreset-withdraw.png Withdraw from Password Reset %}
|
||||
|
||||
Manually changing your Master Password or [rotating your encryption key]({{site.baseurl}}/account-encryption-key/) **will not** withdraw you from Admin Password Reset.
|
||||
Manually changing your Master Password or [rotating your encryption key]({{site.baseurl}}/article/account-encryption-key/) **will not** withdraw you from Admin Password Reset.
|
||||
|
||||
## Reset a Master Password
|
||||
|
||||
@@ -103,16 +103,16 @@ To reset a Master Password for a member of your Enterprise Organization:
|
||||
|
||||
{% image organizations/pwreset-reset.png Reset Password %}
|
||||
|
||||
4. On the Reset Password window, create a **New Password** for the user. If your Organization has enabled the [Master Password Policy]({{site.baseurl}}/policies/#master-password), you will need to create a password that meets the implemented requirements (e.g. min 8 characters, contains numbers):
|
||||
4. On the Reset Password window, create a **New Password** for the user. If your Organization has enabled the [Master Password Policy]({{site.baseurl}}/article/policies/#master-password), you will need to create a password that meets the implemented requirements (e.g. min 8 characters, contains numbers):
|
||||
|
||||
{% image organizations/pwreset-newpw.png Create a New Password %}
|
||||
|
||||
Copy the new Master Password and contact the user to coordinate secure communication of it, for example using [Bitwarden Send]({{site.baseurl}}/create-send/).
|
||||
Copy the new Master Password and contact the user to coordinate secure communication of it, for example using [Bitwarden Send]({{site.baseurl}}/article/create-send/).
|
||||
|
||||
5. Select **Save** to execute the Password Reset. Doing so will log the user out of their current sessions. Active sessions on some client applications, like Mobile Apps, may remain active for up to one hour.
|
||||
|
||||
### After a Password Reset
|
||||
|
||||
When your Master Password is reset, you will receive an email from Bitwarden to inform you of this. On receiving this email, contact your Organization administrator to obtain your new Master Password through a secure channel like [Bitwarden Send]({{site.baseurl}}/create-send/).
|
||||
When your Master Password is reset, you will receive an email from Bitwarden to inform you of this. On receiving this email, contact your Organization administrator to obtain your new Master Password through a secure channel like [Bitwarden Send]({{site.baseurl}}/article/create-send/).
|
||||
|
||||
Once you have regained access to your Vault using the new Master Password, you should immediately change your Master Password to something **strong** and **memorable**. Changing your Master Password after a reset will help to protect your privacy.
|
||||
|
||||
@@ -10,18 +10,18 @@ order: "13"
|
||||
|
||||
## What are Event Logs?
|
||||
|
||||
Event Logs are timestamped records of events that occur within your Organization. Event Logs are accessible to [Admins and Owners]({{site.baseurl}}/event-logs/) from the **Manage** tab of your Organization Vault:
|
||||
Event Logs are timestamped records of events that occur within your Organization. Event Logs are accessible to [Admins and Owners]({{site.baseurl}}/article/event-logs/) from the **Manage** tab of your Organization Vault:
|
||||
|
||||
{% image organizations/event-logs-updated.png Event Logs %}
|
||||
|
||||
Events Logs are [exportable](#export-events) and accessible from the `/events` endpoint of the [Bitwarden Public API]({{site.baseurl}}/public-api/).
|
||||
Events Logs are [exportable](#export-events) and accessible from the `/events` endpoint of the [Bitwarden Public API]({{site.baseurl}}/article/public-api/).
|
||||
|
||||
## Events
|
||||
|
||||
Event Logs record roughly 40 different types of events. The Event Logs screen captures a **Timestamp** for the event, client app information including application type and IP (accessed by hoving over the {% icon fa-globe %} globe icon), the **User** connected to the event, and an **Event** description.
|
||||
|
||||
{% callout info %}
|
||||
Each **Event** is associated with type code (`1000`, `1001`, etc.) that identifies the action captured by the event. Type codes are used by the [Bitwarden Public API]({{site.baseurl}}/public-api/) to identify the action documented by an event.
|
||||
Each **Event** is associated with type code (`1000`, `1001`, etc.) that identifies the action captured by the event. Type codes are used by the [Bitwarden Public API]({{site.baseurl}}/article/public-api/) to identify the action documented by an event.
|
||||
{% endcallout %}
|
||||
|
||||
All Event types are listed below, with their corresponding type codes:
|
||||
@@ -35,7 +35,7 @@ All Event types are listed below, with their corresponding type codes:
|
||||
- Login attempted failed with incorrect password. (`1005`)
|
||||
- Login attempt failed with incorrect two-step login. (`1006`)
|
||||
- Exported Vault. (`1007`)
|
||||
- User updated a password issued through [Admin Password Reset]({{site.baseurl}}/admin-reset/). (`1008`)
|
||||
- User updated a password issued through [Admin Password Reset]({{site.baseurl}}/article/admin-reset/). (`1008`)
|
||||
|
||||
### Item Events
|
||||
- Created item *item-identifier*. (`1100`)
|
||||
@@ -79,7 +79,7 @@ All Event types are listed below, with their corresponding type codes:
|
||||
- Master Password was reset for *user-identifier*. (`1508`)
|
||||
- Edited organization settings. (`1600`)
|
||||
- Purged organization vault. (`1601`)
|
||||
- Organization Vault access by a managing [Provider]({{site.baseurl}}/providers/). (`1603`)
|
||||
- Organization Vault access by a managing [Provider]({{site.baseurl}}/article/providers/). (`1603`)
|
||||
- Updated a Policy. (`1700`)
|
||||
|
||||
{% comment %}
|
||||
@@ -91,7 +91,7 @@ https://github.com/bitwarden/web/blob/master/src/locales/en/messages.json
|
||||
|
||||
### Provider Events
|
||||
|
||||
When any of the above events is executed by a member of an [administering Provider]({{site.baseurl}}/providers/), the **User** column will record the name of the Provider. Additionally, a Provider-specific event will record whenever a member of an administering Provider accesses your Organization Vault:
|
||||
When any of the above events is executed by a member of an [administering Provider]({{site.baseurl}}/article/providers/), the **User** column will record the name of the Provider. Additionally, a Provider-specific event will record whenever a member of an administering Provider accesses your Organization Vault:
|
||||
|
||||
{% image organizations/event-logs-provider.png Provider Access Event %}
|
||||
|
||||
@@ -112,7 +112,7 @@ Edited organization settings.,fa-globe,Web Vault - Chrome,9876dcba-65ed-87fe-19h
|
||||
|
||||
## API Responses
|
||||
|
||||
Accessing Event Logs from the `/events` endpoint of the [Bitwarden Public API]({{site.baseurl}}/public-api/) will return a JSON response like the following:
|
||||
Accessing Event Logs from the `/events` endpoint of the [Bitwarden Public API]({{site.baseurl}}/article/public-api/) will return a JSON response like the following:
|
||||
|
||||
```
|
||||
{
|
||||
@@ -151,4 +151,4 @@ Once you have the unique ID for each member, group, and collection, you can now
|
||||
- Collections
|
||||
- Groups
|
||||
|
||||
After gathering this data, you can join rows on their unique Ids to build a reference to all parts of your Bitwarden Organization. For more information on using the Bitwarden CLI, see [The Bitwarden command-line tool (CLI)]({{site.baseurl}}/cli/).
|
||||
After gathering this data, you can join rows on their unique Ids to build a reference to all parts of your Bitwarden Organization. For more information on using the Bitwarden CLI, see [The Bitwarden command-line tool (CLI)]({{site.baseurl}}/article/cli/).
|
||||
|
||||
@@ -8,14 +8,14 @@ tags: [organizations, import]
|
||||
order: "08"
|
||||
---
|
||||
|
||||
Bitwarden provides a data import tool for easy migration from any password management solution to your Organization Vault. You can also use the data import tool to import from one Bitwarden Organization to another, or to import a Bitwarden [Encrypted Export]({{site.baseurl}}/encrypted-export/).
|
||||
Bitwarden provides a data import tool for easy migration from any password management solution to your Organization Vault. You can also use the data import tool to import from one Bitwarden Organization to another, or to import a Bitwarden [Encrypted Export]({{site.baseurl}}/article/encrypted-export/).
|
||||
|
||||
For a full list of supported import formats, see [What file formats does Bitwarden support for import?]({{site.baseurl}}/import-faqs/#q-what-file-formats-does-bitwarden-support-for-import), or refer to one of these articles for guidance on the most popular solutions:
|
||||
For a full list of supported import formats, see [What file formats does Bitwarden support for import?]({{site.baseurl}}/article/import-faqs/#q-what-file-formats-does-bitwarden-support-for-import), or refer to one of these articles for guidance on the most popular solutions:
|
||||
|
||||
- [Import from LastPass]({{site.baseurl}}/import-from-lastpass/)[Import from LastPass]({{site.baseurl}}/import-from-lastpass/)[Import from LastPass]({{site.baseurl}}/import-from-lastpass/)[Import from LastPass]({{site.baseurl}}/import-from-lastpass/)
|
||||
- [Import from 1Password]({{site.baseurl}}/import-from-1password/)
|
||||
- [Import from Firefox]({{site.baseurl}}/import-from-firefox/)
|
||||
- [Import from Google Chrome]({{site.baseurl}}/import-from-chrome/)
|
||||
- [Import from LastPass]({{site.baseurl}}/article/import-from-lastpass/)[Import from LastPass]({{site.baseurl}}/article/import-from-lastpass/)[Import from LastPass]({{site.baseurl}}/article/import-from-lastpass/)[Import from LastPass]({{site.baseurl}}/article/import-from-lastpass/)
|
||||
- [Import from 1Password]({{site.baseurl}}/article/import-from-1password/)
|
||||
- [Import from Firefox]({{site.baseurl}}/article/import-from-firefox/)
|
||||
- [Import from Google Chrome]({{site.baseurl}}/article/import-from-chrome/)
|
||||
|
||||
{% callout info %}
|
||||
**The above listed articles** describe importing to a Personal Bitwarden Vault. While the guidance for exporting from each solution will be appropriate, it's important to know that importing to an Organization is a slightly different procedure and is [documented below](#import-to-your-organization).
|
||||
@@ -23,19 +23,19 @@ For a full list of supported import formats, see [What file formats does Bitward
|
||||
|
||||
## Import to your Organization
|
||||
|
||||
Importing data to Bitwarden **can only be done from the** [**Web Vault**](https://vault.bitwarden.com){:target="\_blank".} or [CLI]({{site.baseurl}}/cli/#import). Data is [encrypted]({{site.baseurl}}/what-encryption-is-used/) locally before being sent to the server for storage. To import data to an Organization Vault:
|
||||
Importing data to Bitwarden **can only be done from the** [**Web Vault**](https://vault.bitwarden.com){:target="\_blank".} or [CLI]({{site.baseurl}}/article/cli/#import). Data is [encrypted]({{site.baseurl}}/article/what-encryption-is-used/) locally before being sent to the server for storage. To import data to an Organization Vault:
|
||||
|
||||
1. Open your Organization and navigate to the **Tools** tab:
|
||||
|
||||
{% image importing/org-tools.png Organization Tools %}
|
||||
3. Select **Import Data** from the left-hand Tools menu.
|
||||
3. From the format dropdown, choose a **File Format** (see [What file formats does Bitwarden support for import?]({{site.baseurl}}/send-faqs/#q-what-file-formats-does-bitwarden-support-for-import)).
|
||||
3. From the format dropdown, choose a **File Format** (see [What file formats does Bitwarden support for import?]({{site.baseurl}}/article/send-faqs/#q-what-file-formats-does-bitwarden-support-for-import)).
|
||||
4. Select the **Choose File** button and add the file to import.
|
||||
|
||||
{% callout warning %}Import to Bitwarden can't check whether items in the file to import are duplicative of items in your Vault. This means that **importing multiple files will create duplicative** Vault items if an item is already in the Vault and in the file to import.{% endcallout %}
|
||||
5. Select the **Import Data** button to complete your import.
|
||||
|
||||
Currently, file attachments are not included in Bitwarden import operations and will need to be uploaded to your Vault manually. For more information, see [File Attachments]({{site.baseurl}}/attachments/).
|
||||
Currently, file attachments are not included in Bitwarden import operations and will need to be uploaded to your Vault manually. For more information, see [File Attachments]({{site.baseurl}}/article/attachments/).
|
||||
|
||||
## Length-related Import Errors
|
||||
|
||||
|
||||
@@ -10,10 +10,10 @@ order: "05"
|
||||
|
||||
## Manage User Seats
|
||||
|
||||
Bitwarden [Teams and Enterprise Organizations]({{site.baseurl}}/about-organizations/#types-of-organizations) allow you to add or remove user seats on-the-fly to best fit your business's needs. Only an [Organization Owner]({{site.baseurl}}/user-types-access-control/#user-types) or [Provider Service User]({{site.baseurl}}/provider-users/#provider-user-types) can add and remove seats, as this directly affects billing.
|
||||
Bitwarden [Teams and Enterprise Organizations]({{site.baseurl}}/article/about-organizations/#types-of-organizations) allow you to add or remove user seats on-the-fly to best fit your business's needs. Only an [Organization Owner]({{site.baseurl}}/article/user-types-access-control/#user-types) or [Provider Service User]({{site.baseurl}}/article/provider-users/#provider-user-types) can add and remove seats, as this directly affects billing.
|
||||
|
||||
{% callout info %}
|
||||
If you have a [Free or Families Organization]({{site.baseurl}}/about-organizations/#types-of-organizations), your user seats are pre-loaded and fixed at 2 and 6, respectively.
|
||||
If you have a [Free or Families Organization]({{site.baseurl}}/article/about-organizations/#types-of-organizations), your user seats are pre-loaded and fixed at 2 and 6, respectively.
|
||||
{% endcallout %}
|
||||
|
||||
### Add Seats
|
||||
@@ -41,13 +41,13 @@ Removing user seats will adjust your future billing totals. The next charge will
|
||||
To ensure the security of your Organization, Bitwarden applies a 3-step process for onboarding a new member, [Invite](#invite) → [Accept](#accept) → [Confirm](#confirm).
|
||||
|
||||
{% callout success %}
|
||||
Teams and Enterprise Organizations can sync Bitwarden to an existing user directory to automatically add or remove new users using the [**Bitwarden Directory Connector**]({{site.baseurl}}/directory-sync).
|
||||
Teams and Enterprise Organizations can sync Bitwarden to an existing user directory to automatically add or remove new users using the [**Bitwarden Directory Connector**]({{site.baseurl}}/article/directory-sync).
|
||||
{% endcallout %}
|
||||
|
||||
### Invite
|
||||
|
||||
{% callout success %}
|
||||
**For Enterprise Organizations**, we recommend configuring [Enterprise Policies]({{site.baseurl}}/policies) prior to inviting users to ensure compliance on-entrance to your Organization.
|
||||
**For Enterprise Organizations**, we recommend configuring [Enterprise Policies]({{site.baseurl}}/article/policies) prior to inviting users to ensure compliance on-entrance to your Organization.
|
||||
{% endcallout %}
|
||||
|
||||
To invite users to your Organization:
|
||||
@@ -60,8 +60,8 @@ To invite users to your Organization:
|
||||
4. On the Invite User panel:
|
||||
|
||||
- Enter the **Email** address where new users should receive invites. You can add up to 20 users at a time by comma-separating email addresses.
|
||||
- Select the **User Type** to be applied to new users. [User Type]({{site.baseurl}}/user-types-access-control/#user-type) will determine what permissions these users will have at an Organizational level.
|
||||
- Select the **Access Control** to be applied to new users. [Access Control]({{site.baseurl}}/user-types-access-control/#access-control) will determine which Collections these users will have access to, and what level of access within those Collections.
|
||||
- Select the **User Type** to be applied to new users. [User Type]({{site.baseurl}}/article/user-types-access-control/#user-type) will determine what permissions these users will have at an Organizational level.
|
||||
- Select the **Access Control** to be applied to new users. [Access Control]({{site.baseurl}}/article/user-types-access-control/#access-control) will determine which Collections these users will have access to, and what level of access within those Collections.
|
||||
5. Click **Save** to invite the designated users to your Organization.
|
||||
|
||||
{% callout info %}
|
||||
@@ -69,7 +69,7 @@ To invite users to your Organization:
|
||||
|
||||
{% image organizations/org-people-reinvite.png Bulk Reinvite %}
|
||||
|
||||
If you're self-hosting Bitwarden, you can configure the invitation expiration period [using an environment variable]({{site.baseurl}}/environment-variables/).
|
||||
If you're self-hosting Bitwarden, you can configure the invitation expiration period [using an environment variable]({{site.baseurl}}/article/environment-variables/).
|
||||
{% endcallout %}
|
||||
### Accept
|
||||
|
||||
@@ -86,7 +86,7 @@ To confirm accepted invitations into your Organization:
|
||||
3. Select any `Accepted` users and use the {% icon fa-cog %} gear dropdown to {% icon fa-check %} **Confirm Selected**:
|
||||
|
||||
{% image organizations/org-people-options-overlay.png Confirm an Accepted user %}
|
||||
3. Verify that the [fingerprint phrase]({{site.baseurl}}/fingerprint-phrase) on your screen matches the one your new member can find in **Settings** → **My Account**:
|
||||
3. Verify that the [fingerprint phrase]({{site.baseurl}}/article/fingerprint-phrase) on your screen matches the one your new member can find in **Settings** → **My Account**:
|
||||
|
||||
{% image fingerprint-phrase.png Sample Fingerprint Phrase %}
|
||||
|
||||
@@ -108,5 +108,5 @@ To remove users from your Organization:
|
||||
|
||||
Depending on the particulars of your implementation, you may be able to use one of the following methods to delete a Bitwarden user account that belongs to an offboarded user:
|
||||
|
||||
1. If you're self-hosting Bitwarden, an authorized admin can delete the account from the [System Administrator Portal]({{site.baseurl}}/admin-portal/).
|
||||
2. If the account has an `@yourcompany.com` email address that your company controls, you can use the [delete without logging in](https://vault.bitwarden.com/#/recover-delete){:target="\_blank"} tool and confirm deletion within the `@yourcompany.com` inbox. For more information, see [Delete an Account Without Logging In]({{site.baseurl}}/delete-your-account/#without-logging-in).
|
||||
1. If you're self-hosting Bitwarden, an authorized admin can delete the account from the [System Administrator Portal]({{site.baseurl}}/article/admin-portal/).
|
||||
2. If the account has an `@yourcompany.com` email address that your company controls, you can use the [delete without logging in](https://vault.bitwarden.com/#/recover-delete){:target="\_blank"} tool and confirm deletion within the `@yourcompany.com` inbox. For more information, see [Delete an Account Without Logging In]({{site.baseurl}}/article/delete-your-account/#without-logging-in).
|
||||
|
||||
@@ -8,7 +8,7 @@ hidden: false
|
||||
tags: [onboarding]
|
||||
order: "10"
|
||||
redirect_from:
|
||||
- /employee-onboarding-and-succession-white-paper/
|
||||
- /article/employee-onboarding-and-succession-white-paper/
|
||||
---
|
||||
|
||||
{% callout success %}
|
||||
@@ -25,15 +25,15 @@ This guide covers the Bitwarden approach to onboarding and succession planning f
|
||||
|
||||
The Bitwarden vision is to imagine a world where no one gets hacked. We carry this forward in our mission to help individuals and companies manage their sensitive information easily and securely. Bitwarden believes that:
|
||||
|
||||
- Basic password management for individuals can and should be **free**. We provide just that, a [basic free account for individuals]({{site.baseurl}}/about-bitwarden-plans/#free-individual).
|
||||
- Individuals and Families should take an active role in their security using [TOTPs, Emergency Access, and other supporting security features]({{site.baseurl}}/about-bitwarden-plans/#premium-individual).
|
||||
- Organizations can greatly improve their security profile through [Organizational password management and secure sharing]({{site.baseurl}}/about-bitwarden-plans/#bitwarden-for-your-business).
|
||||
- Basic password management for individuals can and should be **free**. We provide just that, a [basic free account for individuals]({{site.baseurl}}/article/about-bitwarden-plans/#free-individual).
|
||||
- Individuals and Families should take an active role in their security using [TOTPs, Emergency Access, and other supporting security features]({{site.baseurl}}/article/about-bitwarden-plans/#premium-individual).
|
||||
- Organizations can greatly improve their security profile through [Organizational password management and secure sharing]({{site.baseurl}}/article/about-bitwarden-plans/#bitwarden-for-your-business).
|
||||
|
||||
{% callout success %}
|
||||
For Bitwarden, [different plans]({{site.baseurl}}/about-bitwarden-plans/) and options are connected and complementary, all originating in our vision of a hack-free world. Empowering everyone at work **and** at home with password management gets us one step closer to that goal.
|
||||
For Bitwarden, [different plans]({{site.baseurl}}/article/about-bitwarden-plans/) and options are connected and complementary, all originating in our vision of a hack-free world. Empowering everyone at work **and** at home with password management gets us one step closer to that goal.
|
||||
{% endcallout %}
|
||||
|
||||
A key aspect of Bitwarden is that, unlike many software applications, everything in every a Vault is [end-to-end encrypted]({{site.baseurl}}/what-encryption-is-used/). To maintain this security model, every person using Bitwarden must have a unique account with a unique [Master Password]({{site.baseurl}}/master-password). Master Passwords should be **strong** and **memorable**.
|
||||
A key aspect of Bitwarden is that, unlike many software applications, everything in every a Vault is [end-to-end encrypted]({{site.baseurl}}/article/what-encryption-is-used/). To maintain this security model, every person using Bitwarden must have a unique account with a unique [Master Password]({{site.baseurl}}/article/master-password). Master Passwords should be **strong** and **memorable**.
|
||||
|
||||
Each user is in charge of their Master Password. Bitwarden is a Zero-knowledge encryption solution, meaning that the team at Bitwarden, as well as Bitwarden systems themselves, have no knowledge of, way to retrieve, or way to reset any Master Password.
|
||||
|
||||
@@ -49,11 +49,11 @@ Security everywhere means security anywhere, so the best password managers provi
|
||||
|
||||
### Users' Personal Vaults
|
||||
|
||||
Anyone who creates a Bitwarden account will have their own Personal Vault. Accessible from any client application, Personal Vaults are unique to each user and only that user holds the key to access it, using a combination of their Email Address and Master Password. Personal accounts, and the personal [Vault items]({{site.baseurl}}/managing-items/) stored therein, are the account owners responsibility. Organization [Owners, Admins, and Managers]({{site.baseurl}}/user-types-access-control) cannot see any other user's Personal Vault by design, guaranteeing someone's personal data remains their own.
|
||||
Anyone who creates a Bitwarden account will have their own Personal Vault. Accessible from any client application, Personal Vaults are unique to each user and only that user holds the key to access it, using a combination of their Email Address and Master Password. Personal accounts, and the personal [Vault items]({{site.baseurl}}/article/managing-items/) stored therein, are the account owners responsibility. Organization [Owners, Admins, and Managers]({{site.baseurl}}/article/user-types-access-control) cannot see any other user's Personal Vault by design, guaranteeing someone's personal data remains their own.
|
||||
|
||||
{% image ../images/onboarding-succession/bitwarden-individual-personal-vault.png Personal Vaults %}
|
||||
|
||||
Families, Teams, and Enterprise Organizations automatically provide members individually with premium features, like [Emergency Access]({{site.baseurl}}/emergency-access/) and [encrypted Attachment storage]({{site.baseurl}}/attachments/), which they can choose to use. A Personal Vault is just that, **Personal**, but Personal Vaults do not enable sharing, [Organization do](#bitwarden-organizations).
|
||||
Families, Teams, and Enterprise Organizations automatically provide members individually with premium features, like [Emergency Access]({{site.baseurl}}/article/emergency-access/) and [encrypted Attachment storage]({{site.baseurl}}/article/attachments/), which they can choose to use. A Personal Vault is just that, **Personal**, but Personal Vaults do not enable sharing, [Organization do](#bitwarden-organizations).
|
||||
|
||||
{% callout success %}
|
||||
**Why provide Personal Vaults by default?**
|
||||
@@ -73,7 +73,7 @@ Anyone can start an Organization directly from the Web Vault:
|
||||
|
||||
{% image organizations/new-org-button-overlay.png Create New Organization %}
|
||||
|
||||
Once created, you'll land in your Organization Vault, which is the central hub for all things sharing and Organization administration. Whoever launches the Organization will be the [Owner]({{site.baseurl}}/user-types-access-control), giving them full control to oversee the **Vault**, to **Manage** users, [Collections](#), [Groups](#), and [Policies](#), to use a suite of Bitwarden **Tools**, and to configure the Organization's **Settings**:
|
||||
Once created, you'll land in your Organization Vault, which is the central hub for all things sharing and Organization administration. Whoever launches the Organization will be the [Owner]({{site.baseurl}}/article/user-types-access-control), giving them full control to oversee the **Vault**, to **Manage** users, [Collections](#), [Groups](#), and [Policies](#), to use a suite of Bitwarden **Tools**, and to configure the Organization's **Settings**:
|
||||
|
||||
{% image getting-started/org-vault.png Organization Vault %}
|
||||
|
||||
@@ -81,13 +81,13 @@ Once created, you'll land in your Organization Vault, which is the central hub f
|
||||
|
||||
Bitwarden Organizations manage users and data in a scalable and secure fashion. Managing users and data on an individual basis is inefficient for large businesses and can leave room for error. To solve this, Organizations provide Collections and [Groups](#groups).
|
||||
|
||||
**Collections** gather together Logins, Notes, Cards, and Identities for [secure sharing]({{site.baseurl}}/sharing/) within an Organization:
|
||||
**Collections** gather together Logins, Notes, Cards, and Identities for [secure sharing]({{site.baseurl}}/article/sharing/) within an Organization:
|
||||
|
||||
{% image organizations/collections-graphic-1.png Using Collections %}
|
||||
|
||||
### Onboarding Users
|
||||
|
||||
Once your Organization is established and Collections are setup to store your data, Owners and Administrators should invite new members. To ensure the security of your Organization, Bitwarden applies a 3-step process for onboarding new members, [Invite]({{site.baseurl}}/managing-users/#invite) → [Accept]({{site.baseurl}}/managing-users/#accept) → [Confirm]({{site.baseurl}}/managing-users/#confirm).
|
||||
Once your Organization is established and Collections are setup to store your data, Owners and Administrators should invite new members. To ensure the security of your Organization, Bitwarden applies a 3-step process for onboarding new members, [Invite]({{site.baseurl}}/article/managing-users/#invite) → [Accept]({{site.baseurl}}/article/managing-users/#accept) → [Confirm]({{site.baseurl}}/article/managing-users/#confirm).
|
||||
|
||||
Users can be onboarded [directly from the Web Vault](#adding-users) or [using the Directory Connector](#directory-connector) application to sync individual users and [Groups](#groups).
|
||||
|
||||
@@ -95,7 +95,7 @@ Users can be onboarded [directly from the Web Vault](#adding-users) or [using th
|
||||
|
||||
In the simplest cases, users can be added to your Organization directly from the Web Vault. When adding users, you can designate which [Collection](#collections) to grant them access to, which [role](#comprehensive-role--based-access-controls) to give them, and more.
|
||||
|
||||
[Learn step-by-step how to add users to your Organization]({{site.baseurl}}/managing-users/#onboard-users).
|
||||
[Learn step-by-step how to add users to your Organization]({{site.baseurl}}/article/managing-users/#onboard-users).
|
||||
|
||||
Once users are fully onboarded to your Organization, you can assign access to your Organization's Vault data by assigning them to [Collections](#collections). Teams and Enterprise Organizations can assign users to [Groups](#groups) for scalable permissions assignment, and construct Group-Collection associations instead of assigning access on the individual level.
|
||||
|
||||
@@ -112,7 +112,7 @@ Groups relate together individual users, and provide a scaleable way to assign p
|
||||
|
||||
#### Comprehensive Role-based Access Controls
|
||||
|
||||
Bitwarden takes an enterprise-friendly approach to sharing at scale. Users can be added to the Organization with [a number of different roles]({{site.baseurl}}/user-types-access-control/), belong to different [Groups](#groups), and have those Groups assigned to various [Collections](#collections) to regulate access. Among the available roles is a [Custom Role]({{site.baseurl}}/user-types-access-control/#custom-role) for granular configuration of administrative permissions.
|
||||
Bitwarden takes an enterprise-friendly approach to sharing at scale. Users can be added to the Organization with [a number of different roles]({{site.baseurl}}/article/user-types-access-control/), belong to different [Groups](#groups), and have those Groups assigned to various [Collections](#collections) to regulate access. Among the available roles is a [Custom Role]({{site.baseurl}}/article/user-types-access-control/#custom-role) for granular configuration of administrative permissions.
|
||||
|
||||
### Offboarding Users
|
||||
|
||||
@@ -127,8 +127,8 @@ Alice is a **Manager** in your Organization, which is hosted on the Bitwarden Cl
|
||||
|**Client Applications**|Uses Bitwarden on Mobile and a Browser Extension personally and professionally, and the Web Vault for occasional Organization-related work.|
|
||||
|**Email & Master Password**|Logs in to Bitwarden using `alice@company.com` and `p@ssw0rD`.|
|
||||
|**Personal Items**|Stores assorted personal items, including Logins and Credit Cards, in her Personal Vault.|
|
||||
|**Permissions in the Organization**|As a [Manager]({{site.baseurl}}/user-types-access-control/), Jane can manage many aspects of Collections.|
|
||||
|**Two-step Login**|Uses Organization-wide [Duo 2FA]({{site.baseurl}}/setup-two-step-login-duo).|
|
||||
|**Permissions in the Organization**|As a [Manager]({{site.baseurl}}/article/user-types-access-control/), Jane can manage many aspects of Collections.|
|
||||
|**Two-step Login**|Uses Organization-wide [Duo 2FA]({{site.baseurl}}/article/setup-two-step-login-duo).|
|
||||
|**Created Collections**|Created a Collection for her team, "Jane's Team Collection".|
|
||||
|**Shared Items**|Created and shared several Vault items that are owned by by the Organization and reside in her team's Collection.|
|
||||
|
||||
@@ -199,7 +199,7 @@ The **Personal Ownership** policy, for example, fits into earlier discussion reg
|
||||
|
||||
### Event Logs
|
||||
|
||||
Bitwarden Organizations include access to [Event Logs]({{site.baseurl}}/event-logs), which can be viewed directly from the Web Vault or [exported to be analyzed]({{site.baseurl}}/event-logs/#siem-and-external-systems-integrations) within security information and event management (SIEM) systems like Splunk. Event Logs include information about:
|
||||
Bitwarden Organizations include access to [Event Logs]({{site.baseurl}}/article/event-logs), which can be viewed directly from the Web Vault or [exported to be analyzed]({{site.baseurl}}/article/event-logs/#siem-and-external-systems-integrations) within security information and event management (SIEM) systems like Splunk. Event Logs include information about:
|
||||
|
||||
- User-Item interactions
|
||||
- Changes made to Vault items
|
||||
@@ -208,7 +208,7 @@ Bitwarden Organizations include access to [Event Logs]({{site.baseurl}}/event-lo
|
||||
- Much, much more
|
||||
|
||||
{% callout success%}
|
||||
In addition to these benefits, customers appreciate the ability to tightly integrate Bitwarden into their existing systems. Bitwarden offers a robust public [API]({{site.baseurl}}/api/) and a fully-featured command line interface ([CLI]({{site.baseurl}}/cli/)) for further integration into existing Organization workflows.
|
||||
In addition to these benefits, customers appreciate the ability to tightly integrate Bitwarden into their existing systems. Bitwarden offers a robust public [API]({{site.baseurl}}/article/api/) and a fully-featured command line interface ([CLI]({{site.baseurl}}/article/cli/)) for further integration into existing Organization workflows.
|
||||
{% endcallout %}
|
||||
|
||||
### Self-hosting
|
||||
@@ -247,4 +247,4 @@ Directory Connector, Login with SSO, Enterprise Policies, and your Vault work we
|
||||
|
||||
#### Q: Can we prevent employees from duplicating credentials from the company Organization to their Personal Vault
|
||||
|
||||
**A:** Yes! Using our [comprehensive suite of role-based access controls]({{site.baseurl}}/user-types-access-control/#access-control) you can make credentials **Read Only** to prevent duplication.
|
||||
**A:** Yes! Using our [comprehensive suite of role-based access controls]({{site.baseurl}}/article/user-types-access-control/#access-control) you can make credentials **Read Only** to prevent duplication.
|
||||
|
||||
@@ -24,7 +24,7 @@ Bitwarden highly recommends setting Enterprise Policies prior to inviting users
|
||||
Policies can be set in two locations:
|
||||
|
||||
- In your Organization, open the **Manage** tab and select **Policies** from the left menu.
|
||||
- Navigate to the Business Portal, and select the **Policies** button. For more information, see [About the Business Portal]({{site.baseurl}}/about-business-portal/).
|
||||
- Navigate to the Business Portal, and select the **Policies** button. For more information, see [About the Business Portal]({{site.baseurl}}/article/about-business-portal/).
|
||||
|
||||
## Available Policies
|
||||
|
||||
@@ -87,7 +87,7 @@ Users who are removed as a result of this policy will be notified via email, and
|
||||
|
||||
### Single Sign-On Authentication
|
||||
|
||||
Enabling the **Single Sign-On Authentication** policy will require non-Owner/non-Admin users to log in with Enterprise Single Sign-On. For more information, see [Access Your Vault using SSO]({{site.baseurl}}/sso-access-your-vault/).
|
||||
Enabling the **Single Sign-On Authentication** policy will require non-Owner/non-Admin users to log in with Enterprise Single Sign-On. For more information, see [Access Your Vault using SSO]({{site.baseurl}}/article/sso-access-your-vault/).
|
||||
|
||||
{% callout info %}
|
||||
The **Single Organization** policy must be enabled before activating this policy.
|
||||
@@ -107,7 +107,7 @@ Vault Items that were created prior to the implementation of this policy or prio
|
||||
|
||||
### Disable Send
|
||||
|
||||
Enabling the **Disable Send** policy will prevent non-Owner/non-Admin users from creating or editing a Send using [Bitwarden Send]({{site.baseurl}}/about-send/). Users subject to this policy will still be able to delete existing Sends that have not yet reached their [Deletion Date]({{site.baseurl}}/send-lifespan/).
|
||||
Enabling the **Disable Send** policy will prevent non-Owner/non-Admin users from creating or editing a Send using [Bitwarden Send]({{site.baseurl}}/article/about-send/). Users subject to this policy will still be able to delete existing Sends that have not yet reached their [Deletion Date]({{site.baseurl}}/article/send-lifespan/).
|
||||
|
||||
A banner is displayed to users in the Send view and on opening any existing Send to indicate that a policy is restricting them to only deleting Sends.
|
||||
|
||||
@@ -117,16 +117,16 @@ Enabling the **Send Options** policy will allow Owners and Admins to specify opt
|
||||
|
||||
|Option|Description|
|
||||
|------|-----------|
|
||||
|Do not allow users to hide their email address|Enabling this option disables the [Hide Email option]({{site.baseurl}}/send-privacy/#hide-email), meaning that all [received Sends]({{site.baseurl}}/receive-send) will include whom they are sent from.|
|
||||
|Do not allow users to hide their email address|Enabling this option disables the [Hide Email option]({{site.baseurl}}/article/send-privacy/#hide-email), meaning that all [received Sends]({{site.baseurl}}/article/receive-send) will include whom they are sent from.|
|
||||
|
||||
### Master Password Reset
|
||||
|
||||
Enabling the **Master Password Reset** policy will allow Owners and Admins to use [Password Reset]({{site.baseurl}}/admin-reset/) to reset the master password of enrolled users. By default, users will need to [self-enroll in Password Reset]({{site.baseurl}}/admin-reset/#self-enroll-in-password-reset), however the [Automatic Enrollment](#automatic-enrollment) option can be used to automatically enroll invited users:
|
||||
Enabling the **Master Password Reset** policy will allow Owners and Admins to use [Password Reset]({{site.baseurl}}/article/admin-reset/) to reset the master password of enrolled users. By default, users will need to [self-enroll in Password Reset]({{site.baseurl}}/article/admin-reset/#self-enroll-in-password-reset), however the [Automatic Enrollment](#automatic-enrollment) option can be used to automatically enroll invited users:
|
||||
|
||||
#### Automatic Enrollment
|
||||
|
||||
Enabling the **Automatic Enrollment** option will automatically enroll new users in Password Reset when their [invitation to the Organization is accepted]({{site.baseurl}}/managing-users/#accept).
|
||||
Enabling the **Automatic Enrollment** option will automatically enroll new users in Password Reset when their [invitation to the Organization is accepted]({{site.baseurl}}/article/managing-users/#accept).
|
||||
|
||||
{% callout info %}
|
||||
Users already in the Organization will not be retroactively enrolled in Password Reset, and will be required to [self-enroll]({{site.baseurl}}/admin-reset/#self-enroll-in-password-reset).
|
||||
Users already in the Organization will not be retroactively enrolled in Password Reset, and will be required to [self-enroll]({{site.baseurl}}/article/admin-reset/#self-enroll-in-password-reset).
|
||||
{% endcallout %}
|
||||
|
||||
@@ -11,17 +11,17 @@ order: "16"
|
||||
The Bitwarden Public API provides Organizations a suite of tools for managing members, collections, groups, event logs, and policies.
|
||||
|
||||
{% callout success %}
|
||||
For automating **management of Vault items**, we recommend using the [CLI]({{site.baseurl}}/cli/). Access to Vault items relies on Vault decryption, which must be done with a Username and Master Password rather than an [API Key](#authentication).
|
||||
For automating **management of Vault items**, we recommend using the [CLI]({{site.baseurl}}/article/cli/). Access to Vault items relies on Vault decryption, which must be done with a Username and Master Password rather than an [API Key](#authentication).
|
||||
{% endcallout %}
|
||||
|
||||
The Public API is a RESTful API with predictable resource-oriented URLs, accepts JSON-encoded request bodies, returns JSON-encoded responses, and uses standard HTTP response codes, authentication, and verbs.
|
||||
|
||||
The Public API is compatible with the OpenAPI Specification (OAS3) and publishes a compliant [`swagger.json`]({{site.baseurl}}/api/specs/public/swagger.json) definition file. Explore the OpenAPI Specification using the Swagger UI:
|
||||
- For Public Cloud-hosted instances: [https://bitwarden.com/help/api/]({{site.baseurl}}/api/){:target="\_blank"}
|
||||
The Public API is compatible with the OpenAPI Specification (OAS3) and publishes a compliant [`swagger.json`]({{site.baseurl}}/article/api/specs/public/swagger.json) definition file. Explore the OpenAPI Specification using the Swagger UI:
|
||||
- For Public Cloud-hosted instances: [https://bitwarden.com/help/api/]({{site.baseurl}}/article/api/){:target="\_blank"}
|
||||
- For Self-hosted instances: https://your.domain.com/api/docs/
|
||||
|
||||
{% callout info %}
|
||||
Access to the Bitwarden Public API is available customers on the following plans, **Classic 2019 Enterprise Organizations**, current **Enterprise Organizations**, and current **Teams Organizations**. For more information, see [About Bitwarden Plans]({{site.baseurl}}/about-bitwarden-plans/#compare-the-plans-1).
|
||||
Access to the Bitwarden Public API is available customers on the following plans, **Classic 2019 Enterprise Organizations**, current **Enterprise Organizations**, and current **Teams Organizations**. For more information, see [About Bitwarden Plans]({{site.baseurl}}/article/about-bitwarden-plans/#compare-the-plans-1).
|
||||
{% endcallout %}
|
||||
|
||||
## Endpoints
|
||||
@@ -46,7 +46,7 @@ The API Key `client_id` and `client_secret` can be obtained by an **Owner** from
|
||||
|
||||
{% image organizations/org-api-key.png Get Organization API Key %}
|
||||
|
||||
If, as an owner, you want to share the API Key with an Admin or other user, use a secure communication method like [Bitwarden Send]({{site.baseurl}}/about-send/).
|
||||
If, as an owner, you want to share the API Key with an Admin or other user, use a secure communication method like [Bitwarden Send]({{site.baseurl}}/article/about-send/).
|
||||
|
||||
{% callout warning %}
|
||||
Your API key enables full access to your Organization. Keep your API key private. If you believe your API key has been compromised, select the **Rotate API Key** button on this screen. Active uses of your current API key will need to be reconfigured with the new key before use.
|
||||
@@ -134,5 +134,5 @@ The Bitwarden Public API uses conventional HTTP response codes to indicate the s
|
||||
## Further Reading
|
||||
|
||||
For more information about using the Bitwarden Public API, see the following articles:
|
||||
- [Bitwarden Public API OAS Specification]({{site.baseurl}}/api/){:target="\_blank"}
|
||||
- [Event Logs]({{site.baseurl}}/event-logs/)
|
||||
- [Bitwarden Public API OAS Specification]({{site.baseurl}}/article/api/){:target="\_blank"}
|
||||
- [Event Logs]({{site.baseurl}}/article/event-logs/)
|
||||
|
||||
@@ -8,18 +8,18 @@ hidden: false
|
||||
tags: [sharing, how to]
|
||||
order: "04"
|
||||
redirect_from:
|
||||
- /share-to-a-collection/
|
||||
- /article/share-to-a-collection/
|
||||
---
|
||||
|
||||
{% callout info %}
|
||||
In order to share items you need to be a member of an Organization. Learn more about [Organizations]({{site.baseurl}}/about-organizations/) or learn how to [start your own two-person Organization]({{site.baseurl}}/getting-started-organizations/).
|
||||
In order to share items you need to be a member of an Organization. Learn more about [Organizations]({{site.baseurl}}/article/about-organizations/) or learn how to [start your own two-person Organization]({{site.baseurl}}/article/getting-started-organizations/).
|
||||
{% endcallout %}
|
||||
|
||||
Sharing items with Bitwarden means moving them into an Organization and Collection, a structure used to gather together Logins, Notes, Cards, and Identities for access by multiple users. There are a few different ways you can create Organization items for sharing:
|
||||
|
||||
## Move an Item to an Organization
|
||||
|
||||
Organization members can move items to any assigned Collection(s) unless they're given [**Read Only** access]({{site.baseurl}}/user-types-access-control/) to that Collection. Items can only be moved to Organizations **from the Web Vault**:
|
||||
Organization members can move items to any assigned Collection(s) unless they're given [**Read Only** access]({{site.baseurl}}/article/user-types-access-control/) to that Collection. Items can only be moved to Organizations **from the Web Vault**:
|
||||
|
||||
1. Hover over the item you want to share and select the {% icon fa-cog %} gear dropdown:
|
||||
|
||||
@@ -39,7 +39,7 @@ Moving an item to an Organization **will transfer ownership to the Organization*
|
||||
|
||||
## Create an Organization Item
|
||||
|
||||
Organization members can create new items directly for any assigned Collection(s) unless they're given [**Read Only** access]({{site.baseurl}}/user-types-access-control/) to that Collection. Shared items can only be created **from the Web Vault**, either in your My Vault view or in the Organization view:
|
||||
Organization members can create new items directly for any assigned Collection(s) unless they're given [**Read Only** access]({{site.baseurl}}/article/user-types-access-control/) to that Collection. Shared items can only be created **from the Web Vault**, either in your My Vault view or in the Organization view:
|
||||
|
||||
<ul class="nav nav-tabs" id="myTab" role="tablist">
|
||||
<li class="nav-item" role="presentation">
|
||||
|
||||
@@ -8,7 +8,7 @@ tags: [user types, access control]
|
||||
order: "06"
|
||||
---
|
||||
|
||||
Users in Bitwarden Organizations can be granted a variety of User Types and Access Controls in order to manage their permissions and access. You can set User Types and Access Controls when you [invite users to your Organization]({{site.baseurl}}/managing-users/), or at any time from the **Manage** → **People** screen in your Organization:
|
||||
Users in Bitwarden Organizations can be granted a variety of User Types and Access Controls in order to manage their permissions and access. You can set User Types and Access Controls when you [invite users to your Organization]({{site.baseurl}}/article/managing-users/), or at any time from the **Manage** → **People** screen in your Organization:
|
||||
|
||||
{% image organizations/user-types-access-control.png Editing User Types and Access Control %}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user