Temporarily Revoke Access

Organization admins and some custom role members can manage members' access to the organization on a temporary basis through revoking and restoring. Revoking access is:

• Often useful when a member shouldn't have access for a period of time, but will need to have access restored in the future.

• Automatically done when users are in violation of some enterprise policies.

• Automatically done for organizations using SCIM when a member is suspended or de-activated in the IdP.

Restoring access to a revoked member does not require that they take any steps to rejoin the organization, meaning they won't need to be re-invited, accept an invite, or be confirmed.

To revoke organization access to a member:

1. In the Admin Console, navigate to the Members view.

2. Select the members you want to revoke access for and use the  Options menu to Revoke access:

   

Members with revoked access are listed in the Revoked tab and will:

• Not have access to any organization vault items or collections.

• Not have the ability to use SSO to login, or Organizational Duo for two-step login.

  • If the member does not have a master password, they'll still be able to use trusted devices to login but only be able to access their individual vault.

• Not be subject to your organization's policies.

• Not occupy a license seat.

To restore access to a member:

1. In the Admin Console, navigate to the Members view.

2. Open the Revoked tab.

3. Select the members you want to restore access for and use the  Options menu to Restore access: