Administrator

Administrator • LockSelf

The main administrator

The main administrator is identified by an orange crown. This is the account that manages the main organization and the one able to create sub-organizations.

Important: this is the most important account in LockSelf. It is from this account that the moderators, the sub-organization administrators and the entire initial configuration of the environment can be set up: SSO interconnection, activation and renewal of the subscription.

Main administrator rights

Action / Permission Main administrator Organization administrator Moderator

Management

Create / delete a user Yes Yes Yes
Create / delete a group Yes Yes Yes
Block / unblock a user Yes Yes Yes
Create / delete an organization Yes Yes No
Import / export users Yes Yes Yes
Create / delete an API user Yes Yes No
Create / delete a moderator Yes Yes No

Configuration

Enable / disable SSO Yes No No
Activate / renew the subscription Yes No No
Dashboard access Yes Yes Yes
Enable / disable SMTP Yes No No
Enable / disable White Label Yes Yes No

LockPass

Import passwords Yes Yes Yes
Export shared passwords Yes Yes Yes
Configure shared spaces Yes Yes Yes
Access management Yes Yes Yes
Manage shared passwords Yes Yes Yes

Change the administrator account

It is possible to change the administrator account and to appoint a new administrator account.

  1. From the Administrator account, click on the account to promote.
  2. Click on "Set as moderator".
  3. Click on "Set as administrator".
  4. Confirm.

The administrator change is effective. Log back in to the application to apply the changes.

The multi-administrator

An administrator can now be an administrator of several organizations at once. This is called a multi-administrator: a single account manages 2 or more organizations within the same LockSelf instance.

Becoming a multi-administrator

You can become a multi-administrator in two ways:

  1. As an administrator of an organization, you create a sub-organization and appoint yourself administrator of it.
  2. Another administrator creates an organization in the instance and appoints you administrator.

In both cases, you are then administrator of 2 or more organizations.

Switching the current organization

To access the resources of another organization you administer, you switch your current organization from your profile area. You thus move from one organization to another. From 7 administered organizations onwards, a search is available to quickly find the desired organization.

The blind administrator

The blind administrator is an administrator who manages their organization without having access to sensitive content (passwords and their associated data). They continue to manage users, organizations, certain settings and resources, but cannot view or use passwords.

Who can make an administrator blind?

An administrator of an organization higher up in the tree. They go to the profile panel of the administrator concerned and enable the "blind" toggle. The action is reversible: by disabling the toggle, the same person restores access (the manager "regains sight").

Multi-administrator case: if a multi-administrator is made blind in one of their organizations, they become blind in all of their organizations. Conversely, if they are blind in none, they keep sight everywhere.

What a blind administrator can do in a shared category

  • Manage access to a category: add / remove users and groups, promote a manager, etc.
  • Manage a category's settings: monitor usage, hide passwords, allow editing / deletion.
  • Edit a category and delete an empty category.

What a blind administrator cannot do

  • Delete a category that contains at least one password.
  • View the sensitive information in a password's details.
  • Use a password (view it, copy it, use it…).
  • Delete, move or edit a password.

Data considered sensitive: password, username, OTP, description, optional field 1, optional field 2, optional field 3.

Updated