Shared Credential Folders
Credential Folder Shared to the Client Site
You can share Credential Folders, along with any sub-folders and the credentials stored within the folders, to Site users, either by sharing to a Site Security Group or to individual Site users, or a combination of both. You can decide the Site users level of access as well, Read-only or Read/Write.
In order for you to share to a Site Security Group, the Site Administrator End-user must have created Security Groups in order for you to select them as the share target. Site Administrator End-user should refer to Setup Security Preferences for directions on creating Site Security Groups.
You can also share a sub-folder without this causing the parent folder to be shared - allowing you to control exactly which folders to share where needed. You may need to alter your folder structure such that only appropriate folders and the credentials are sared - if so, please refer to the Folder Structures directions.
The Site Administrator End-user can also share Credential Folders to the Passportal MSP, as detailed in Shared Credential Folders (from Site).
To Share Credential Folders to the Client Site:
- Hover over the folder to be shared to see the folder menu, and select Share - The Share folder dialog opens
- Select SITE GROUPS or SITE USERS
- Click Add group (for SITE GROUPS) or Add user (for SITE USERS)
- From the drop-down list select the Security Group (for SITE GROUPS) or User (for SITE USERS)
- If an incorrect selection was made, you can click the x on the selected group / user to remove them
- Select the required File access level from either Read-only or Read/Write
- Click Add - the dialog updates to show the selected users and their access Level. You can delete the selection by clicking the Bin icon, or edit the entry by clicking the Pencil icon. Switch between groups and users by clicking SITE GROUPS and SITE USERS
- Repeat from step 2 to add further Site Groups and/or Site Users (you can select a different File access levels for each addition if required)
- Once all required Security Groups and Site Users have been added, click Save to complete the share settings. The view will refresh to show the updated folder icon denoting that it has been shared. The menu also provides new options once the folder has been shared
Note: Security Group access level takes precedence over the Individual Site User access level (where a Site User is added individually as well as part of a Security Group).
IMPORTANT: Unless the option to Hide Unassigned Folders from Users has been enabled by the Site Administrator End-user, all Site Users will be able to see the shared credential folders and credential entries, however only those assigned users (either individually or via the Security Group) will be able to use them. Site Administrator End-users can refer to Site Settings for information on this setting,
Unshare a Folder
A shared folder can be unshared, which causes all the sub-folders and credentials to also be unshared.
- Hover over the folder to be shared to see the folder menu, and select Unshare
- Click Unshare in the confirmation dialog, or Cancel to back out of the unshare process
Credential Folder Shared from the Client Site
You can receive Shared Credential Folders from the Client Site, along with any sub-folders and the credentials stored within the folders. Your access to the folders and credentials is dependent on the Access Level (Read-only or Read/Write) as configured by the Site Administrator End-user. Site Administrator End-users should refer to Shared Credential Folders (from Site) for directions to share folders.
Shared Folder and Credential Icons
The icons on shared folders, as well as the credentials contained within them update to indicate they have been shared, and which direction they have been shared (Passportal MSP to / from Client Site).
Folders
Where a Folder has been shared to the Client Site, the folder icon shows as a green folder with a + (plus) symbol
Where a Folder has been shared from the Client Site, the folder icon shows as green folder outline
Credentials
Where a credential has been shared to the Client Site, you will see a blue arrow icon to the right of the Credential Description. When the icon is hovered over, it will display the message Outgoing share.
Where a credential has been shared from the Client, you will see a green arrow icon to the right of the Credential Description. When the icon is hovered over, it will display the message Incoming share.
Security Group Considerations
Where a Site Security Group has been assigned as part of a Folder Share, the Site Security Group cannot be deleted by the Site Administrator End-user. Should this be attempted, the Site Administrator End-user will receive the message: Security Group cannot be deleted as it has received shared credentials. Please have your service provider uninitiate the shared information if group needs to be deleted.