Password Access Control | Zoho Vault

Setting Up Password Access Control

Often, business-critical activities are carried out using shared passwords. These passwords are accessed by multiple employees on a regular basis, without restriction. It's important to maintain an additional layer of security for such critical accounts to ensure these passwords are accessed only for valid reasons. We encourage you to use Zoho Vault's access control feature to achieve this requirement.

For example, you could share the admin password of your server with multiple administrators in your company. When you enable access control, users will have to raise access requests with valid reasons to access passwords enforced with access control. You can validate the user's reason for access, and approve their requests accordingly. 



Enforcing access control

  1. Select the password, then click More. 
  2. Click Enforce Access Control.



  3. Select one or more administrators who can grant access to this password in your absence.
  4. Exclude selective users, if necessary, from this workflow. 



Requesting access 

To access a password protected with access control:
  1. Click the password, then select Request immediate access for immediate access, or Request approval in advance, then enter a specific time to access the passwords in the future
  2. Enter a valid reason, then click Request 



  3. If the password owner approves your request, select the password, then click Check Out to access it for a time-limited period.



  4. Select Check In to return access to the password after completing your tasks.

     
Note: Users will be unable to access passwords if the password owner rejects the access, or the validity of the request expires. The password owner can also revoke the user's access at any time.

Additional Settings

You can further tighten the security for these passwords by setting additional access constraints. You can: 

  • Mandate that at least two administrators approve password access
  • Define when the unapproved access requests become invalid
  • Set in minutes how long the users can access these passwords
  • Configure automatic access approvals by selecting one of the following options, then click Save and enable:

  • On all weekdays
  • On all weekends
  • At a specific time 00-23 hours and 00-58 minutes
  • When a valid ticket from help desk is referenced



Note: You can revoke this configuration at any time.

Managing access requests

  1. Select Password access requests under the Password management tab from Settings.
  2. Access all requests pending your approval from Approval requests.



  3. Approve or Reject the requests accordingly.



  4. Track the status of all your access requests from My Requests.



Still can’t find what you’re looking for? Contact us. We will be happy to help.