HELP FILE

Add and Manage LastPass Enterprise Groups

Groups can be utilized to assign policies and/or shared folders to a designated set of users all at once within your LastPass Enterprise account. You can create user groups manually (or automatically sync groups if you choose to set up the LastPass Active Directory Connector), as well as edit or delete groups, manage users within a group, and view group details. Please note the account performance limitations of creating a large number of groups.

Note: Are you seeing something different? Learn how to navigate in the New Admin Console or the SSO & MFA Admin Console.

Group management is available in all LastPass Admin Consoles (i.e., Password Manager, MFA, SSO, and SSO & MFA). Any changes made to groups in any of the Admin Consoles will retroactively reflect across all admin environments that are available for your account. Additionally, when users and groups are added via directory sync (e.g., LastPass AD Connector, federated login using Azure AD or AD FS, etc.), they are also added across all Admin Consoles available for your account.

Enterprise Admin Console Group of Users

Account performance limitations

  • While there is no limitation to the amount of users you can add to a group, account performance may be affected if a group is assigned more than 2,000 users.
  • If there are more than 1,000 groups listed in your account, the "Security score" and "Number of users" columns will be empty to ensure optimal account performance.

About groups and shared folders

Please be aware that Admins for the LastPass Enterprise account are not automatically admins to all Shared Folders within the account. You must either be explicitly added to the Shared Folder by the admin of the Shared Folder, or enable the policy 'Super Admin - Shared Folders'. This policy gives you administrative access to all Shared Folders created within the LastPass Enterprise account, whether or not were explicitly added to the Shared Folder or not.

Add a group manually

  1. Log in with your username and Master Password to access the Admin Console at https://lastpass.com/company/#!/dashboard.
  2. Click Groups in the left menu.
  3. Click Add Group in the top navigation
  4. Fill in a group name, then click Add Group.
  5. When redirected to the "Users" tab, click Add Users.
  6. In the Search field, enter the name of a user.  When the username is populated, click Add in the right navigation.
  7. Add all of your desired users, then click Done when finished.

Edit or Delete a group

  1. From the Admin Console, click Groups in the left menu.
  2. All groups are displayed, including an overview of the Security score and total number of users for each.
  3. Click on your desired group, then choose from the following options:
    • Edit group name – Make changes to your group name, then click Save.
    • Delete group – Click OK to confirm that you want to permanently delete this group and all its information.
  4. When finished, click the Exit icon to leave this menu.

Manage users within a group

  1. From the Admin Console, click Groups in the left menu.
  2. Click on your desired group.
  3. On the "Users" tab, all assigned users are listed. Choose from the following options:
    • Add Users – Enter the name of your desired user, then click Add in the right navigation. Repeat this step to add all desired user, then click Done when finished.
    • Remove – Click OK to confirm that you want to remove your selected user from the group. This will only remove the user from the designated group, not from your LastPass account.
  4. When finished, click the Exit icon to leave this menu.

View group details

  1. From the Admin Console, click Groups in the left menu.
  2. Click on your desired group.
  3. Click the Details tab to view the total number of policies applied to this group.
  4. When finished, click the Exit icon to leave this menu.