HELP FILE

How do I manage LastPass Enterprise and Identity users?

You can view all LastPass users for your account and their user statuses, and take appropriate action if needed.

Before you begin:
Note: Are you seeing something different? See these instructions for the Password Manager Admin Console.
  1. Log in with your email address and Master Password to access the New Admin Console at https://admin.lastpass.com/uac.
  2. Click Users and select a user.
  3. Click the ... icon.

  4. The configuration options will vary depending on the user's account status, as follows:

    Users Awaiting Approval
    For accounts that provision users via the LastPass Active Directory Connector and have configured it to add users as pending rather than automatically active. Select Reject or Approve to change the user's status.
    Require password change
    This will force the user to manually reset their Master Password. They will receive the notification to do this the next time the user logs in. Learn more.
    Destroy all sessions
    This will log the user out of all active sessions across all devices.
    Disable user
    Temporarily disable the user’s account making it inaccessible to them but not deleting the account entirely. Please note that disabled user accounts are retained for the lifetime of the account.
    Delete user
    You should weigh the decision carefully about using this option versus the "Remove User from Company" option. Deleting a user will delete that user’s LastPass account entirely. If the user has saved any personal logins or other data to their Vault then they will no longer have access to that data.
    Remove user from company
    This option will remove the user from your LastPass Enterprise or Identity account, and will delete all shared folders from the user’s account. With this option, the user will continue to have access to their account as a standard LastPass user. Learn more.
    Disable Multifactor
    This will disable all Multifactor Authentication services for the user’s account. If the policy “Prohibit multifactor disable via email” is enabled, this option will be the only way for Multifactor Authentication to be disabled.
    Edit name
    Assign a nickname to the account that may be more recognizable to you than the user’s email address.

    Reinvite User
    Send another invitation for the user to activate their account.
    Activate User
    Change the user's account status to Active.
    Delete User
    You should weigh the decision carefully about using this option versus the "Remove User from Company" option. Deleting a user will delete that user’s LastPass account entirely. If the user has saved any personal logins or other data to their Vault then they will no longer have access to that data.
    Remove user from company
    This option will remove the user from your LastPass Enterprise or Identity account, and will delete all shared folders from the user’s account. With this option, the user will continue to have access to their account as a standard LastPass user.