Sharing, roles & recovery — found from sitemap — Passwork

Cited by

Facts read from this source

• Builtin roles Report an error

  “Passwork includes three built-in roles: Owner, Administrator, and Member (User). Additionally, your organization may have custom roles.”

• Owner role Report an error

  “There is exactly one Owner. The Owner role cannot be modified and grants the highest level of access, including the ability to change other users' roles.”

• Administrator role Report an error

  “Administrators can manage users, configure settings, and access all vaults for which they are corporate administrators.”

• Corporate administrator Report an error

  “Every vault type should have at least one corporate administrator — an account that is automatically added to all vaults of that type and cannot be removed by vault owners. This ensures emergency access and prevents vault orphaning.”

• Role based user management Report an error

  “if a custom admin role can manage users, verify that the Role-based user management setting restricts it to managing only users in the corresponding member role (not all users in the system).”

• Service account emergency access Report an error

  “a service account must exist for emergency vault recovery.”

• Service account blocked Report an error

  “The service account is blocked in Passwork — it cannot sign in under normal circumstances”

• API access Report an error

  “The Passwork API allows programmatic access to vault data. Compromised API tokens are equivalent to compromised user credentials.”

• API access disable Report an error

  “API access is disabled for standard user roles if no integration requires it”

• User access tab Report an error

  “Check the Access tab — this shows all vault and folder access for that user.”

• Action history Report an error

  “Action History access (unless your policy requires user-level audit)”

• Sod ISO Report an error

  “For organizations with compliance requirements (ISO 27001, SOC 2), verify the following separations exist:”

• Cse master password Report an error

  “The service account credentials and master password (if CSE enabled) are stored in a physically secure offline location”

• Activity log Report an error

  “View Activity log Yes Low”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The CISO Sharing, roles & recovery
• The CISO Audit logs, policies & reporting
• The CISO Sharing, roles & recovery
• The CISO Audit logs, policies & reporting
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor Sharing, roles & recovery
• The Compliance Auditor Audit logs, policies & reporting
• The Compliance Auditor Sharing, roles & recovery
• The Compliance Auditor Audit logs, policies & reporting
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer Sharing, roles & recovery
• The DevOps Engineer Audit logs, policies & reporting
• The DevOps Engineer Sharing, roles & recovery
• The DevOps Engineer Audit logs, policies & reporting
• The Identity Engineer Sharing, roles & recovery
• The Identity Engineer Audit logs, policies & reporting
• The Identity Engineer Sharing, roles & recovery
• The Identity Engineer Audit logs, policies & reporting
• The Skeptic Sharing, roles & recovery
• The Skeptic Audit logs, policies & reporting
• The Skeptic Sharing, roles & recovery
• The Skeptic Audit logs, policies & reporting
• The SME Owner Sharing, roles & recovery
• The SME Owner Audit logs, policies & reporting
• The SME Owner Sharing, roles & recovery
• The SME Owner Audit logs, policies & reporting