Ability to set default vault permissions

Implemented

Ability to set default vault permissions

0 vote

avatar


Hello,

Currently the highest level on which you can assign permissions to roles is in the "Vault Settings" window. We would like to have the ability to specify default system-wide permissions that are inherited by all vaults in the system. Maybe the existing "System Permissions" window can be extended to include these kind of permissions?


The reason why we would like to use this feature is because we want to grant a certain role the permission to view the password for all entries in the vaults that they have access to. Since we have a lot of vaults, this would require us to update the permissions of all vaults using Powershell, but also requires us to remember to set these permissions whenever we create a new vault.

Version: 2019.2.22.0
DataSource: MariaDB


Regards,
Mark

All Comments (15)

avatar

Hello,
It's a good idea. I will add this to our todo list.

Regards

David Hervieux

avatar

Hello,

Do you have any idea if this feature request is still on your todo list and if it's due to be implemented in the near feature, or is that unlikely?

Regards,
Mark

avatar

Hello,
It's on our todo list for the next major RDM version. We have to be careful when we implement security enhancement since it must be done in all different plate form at the same time. Therefore it takes more time for planing and implementing the improvement.

Regards

David Hervieux

avatar

Hello,

Thank you for the update!

Regards,
Mark

avatar

Hello,
Has this been implemented yet?

avatar

Hello,
It's not implemented yet. I will increate the priority.

Regards

David Hervieux

avatar

+1

Currently starting out and have 13+ vaults to create. Would be ideal to be able to set a template up in order to ensure they get the standard permissions.

Thanks
Iain

Version 2025.3.23.0 64-bit
Data Source SQL
avatar

Hello

I'm also having this issue. I hope that it will be implemented soon.

Hopefully this will be accelerated since several people are requesting this functionality.

With kind regards,
Nick

avatar

Hello,

This is definitely in our roadmap for our next major version (maybe sooner if we're able).

Regards,

Hubert Mireault

avatar

+1

We have the same issue. With 77 Vaults, global settings changes are starting to become time consuming.

forum image

This feature is essential, especially for MSP contexts.
And i hope that this feature will not be limited to the "System Permissions" but will also be implemented for all the Vaults settings like Session Recording.

Regards,

avatar

Absolutely needed for MSP!
With new customers coming on board it will become impossible to manage in the current format.

Really need this to be given a higher priority.

Thanks
Iain

avatar

Thanks for the feedback everyone. We hear you loud and clear, so we're going to be working on improving this in the near future. This is assigned to a dev and we'll update you in this thread once we have news about it.

Regards,

Hubert Mireault

avatar

Hi,

Thanks for increasing the priority! Just wanted to let you know that we are also still waiting on this feature. Currently we are at 1339 vaults and it's very annoying to keep setting the correct vault permissions for every new vault we create.

Regards,
Mark

avatar

Hello,
would be great in addition, the possibility to export only the vault itself in massive mode.
We need to export 143 vaults in our new enviroment with a new three and then set to everyone the root permissions and it means a lot of effort.
If would be possible to export with a selection (in my case all) the vaults from one data source to another data source substantially reduce this effort.

avatar

Hello,

We've made two improvements in order to make handling permissions a bit easier. These will both be available in our next official release, early next year :

  • Permissions at the System settings level, which you will then be able to inherit from the root
  • Vault templates, also in the System settings, which will be applied when creating a new vault


Don't hesitate to reach out to us if there's anything more we can do.

Regards

Jonathan Del Signore