HELP FILE
How do I manage LastPass Enterprise and Identity users?
You can view all LastPass users for your account and their user statuses, and take appropriate action if needed.
Before you begin:
Note: Are you seeing something different? See these instructions for the
Password Manager Admin Console.
- Log in with your email address and Master Password to access the New Admin Console at https://admin.lastpass.com/uac.
- Click Users and select a user.
- Click the ... icon.
- The configuration options will vary depending on the user's account status, as follows:
- Users Awaiting Approval
- For accounts that provision users via the LastPass Active Directory Connector and have configured it to add users as pending rather than automatically active. Select Reject or Approve to change the user's status.
- Require password change
- This will force the user to manually reset their Master Password. They will receive the notification to do this the next time the user logs in. Learn more.
- Destroy all sessions
- This will log the user out of all active sessions across all devices.
- Disable user
- Temporarily disable the user’s account making it inaccessible to them but not deleting the account entirely. Please note that disabled user accounts are retained for the lifetime of the account.
- Delete user
- You should weigh the decision carefully about using this option versus the "Remove User from Company" option. Deleting a user will delete that user’s LastPass account entirely. If the user has saved any personal logins or other data to their Vault then they will no longer have access to that data.
- Remove user from company
- This option will remove the user from your LastPass Enterprise or Identity account, and will delete all shared folders from the user’s account. With this option, the user will continue to have access to their account as a standard LastPass user. Learn more.
- Disable Multifactor
- This will disable all Multifactor Authentication services for the user’s account. If the policy “Prohibit multifactor disable via email” is enabled, this option will be the only way for Multifactor Authentication to be disabled.
- Edit name
- Assign a nickname to the account that may be more recognizable to you than the user’s email address.
- Reinvite User
- Send another invitation for the user to activate their account.
- Activate User
- Change the user's account status to Active.
- Delete User
- You should weigh the decision carefully about using this option versus the "Remove User from Company" option. Deleting a user will delete that user’s LastPass account entirely. If the user has saved any personal logins or other data to their Vault then they will no longer have access to that data.
- Remove user from company
- This option will remove the user from your LastPass Enterprise or Identity account, and will delete all shared folders from the user’s account. With this option, the user will continue to have access to their account as a standard LastPass user.
Related Articles
- How do I manually add LastPass Enterprise or Identity users?
- How do I upload a CSV list of LastPass Enterprise and Identity users?
- Can I view LastPass Enterprise or Identity user status?
- Can I customize the user table view for my LastPass Enterprise or Identity account?
- How do I view LastPass Enterprise and Identity user details?
- How do I export a list of users for my LastPass Enterprise or Identity account?
- Can I terminate LastPass Enterprise or Identity users?
- How do I manually terminate LastPass Enterprise or Identity users?
- How do I resend the LastPass MFA activation email for Enterprise or Identity users?