Some Vaults belong to domains with other Vaults. If you have Domain Admin checkbox set on your User record, you’ll see the Domain Users page in addition to the Vault Users page when you navigate to Admin > Users & Groups. From the Domain Users page, you can filter the user list to see only members of specific Vaults, cross-domain users, or all users, including the current domain and cross-domains. You only have access to Vaults where you have the correct permissions.

Permissions & Settings for Domain User Management

The following settings govern whether you can access the Domain Users page and manage users across Vaults:

  • For every Vault, you must have a security profile with a permission set that grants the Admin: Users: Create, Edit permissions.
  • Your user profile must have the Domain Admin checkbox enabled.

How to Grant Domain Admin Access

Only users who already have the Domain Admin setting can give access to another user. You can enable this setting for any user, but only users with the correct permissions on all Vaults will have access to all options.

To grant Domain Admin access:

  1. Navigate to Admin > Users & Groups > Vault Users.
  2. Click the user’s name to open the user details page.
  3. Click Details or scroll down to the Details section.
  4. Click Edit.
  5. Select the Domain Admin checkbox.
  6. Click Save.

The Domain Admin setting and permissions allow access to all Vaults in a multi-Vault domain. This access should be limited to only the users who need it.

How to Import Users from Other Vaults

If your domain includes multiple Vaults, you can import users that already belong to another Vault on the domain. To import users:

  1. From the Domain Users page, select the users you wish to add.
  2. Choose Add Selected Users to Vaults from the Actions menu.
  3. The Add Users to Selected Vaults dialog opens, showing all Vaults that exist on the domain. Select the Vaults to which you wish to add the selected users.
  4. Select a License Type and Security Profile for each Vault. Vault assigns the same license type and security profile to all users selected for import.
  5. Click OK.

About the Domain User Details Page

When you click a user’s name from the Domain Users page, Vault opens the Domain User details page. The Domain User details page is read-only except for Vault membership assignments across Vaults.

You can edit users assigned to the current Vault from Admin > Users & Groups > Vault Users. You can also edit users not assigned to the current Vault from the Admin > Users & Groups > Vault Users page in any Vault where the user is assigned.

How to Edit Vault Membership for Domain Users

As a user with Domain Admin access, you can edit the Vault Memberships section of the Domain User details page. This section lists each Vault to which the user belongs, as well as the user’s security profile and license type for that Vault, as long as you have access to that Vault.

How to Assign License Types & Security Profiles

To change the license type or security profile assigned to a specific user, click Edit on the Vault Memberships section of the Domain User details page. Change the selections as needed and click Save. You can never assign a security profile that includes permissions that you do not have.

Admins can only change the license type and security profile for cross-domain users from the Vault Users page. These are not editable from the Domain Users page. System-owned users are read-only and cannot be edited from any page.

How to Change User Status on Individual Vaults

To change a user’s status for an individual Vault:

  1. Click the user’s name on the Domain Users page.
  2. Click Vault Memberships or scroll down to the Vault Memberships section.
  3. Click Edit.
  4. Select the status from the Status drop-down menu.

How to Change User Status for the Domain

To change a user’s status for the entire domain, click the user’s name on the Domain Users page. From the Domain User detail page, select Change Domain Status to Active/Inactive from the Actions menu.

When you use this action to change a user’s domain status, you need to refresh the page before the updated status appears in the Vault Memberships section. You can also click the Edit button in Vault Membership to see the updated status.

A user may be Inactive in all Vaults, but still have a Domain Status of Active. If the Domain Status is Inactive, the user cannot be Active in any Vaults.