We have been looking at some of the sharing aspects of ZoHo Vault.

 

The sharing process works well in principle however there is not really much scope for delegating access to large sets of secrets across different user roles. That is, it is not very flexible.

 

It would be useful to add the concept of configurable collections of users (roles or groups) and the user should be able to be a member of multiple roles/groups. You can then assign sharing rights to both individual users and to roles/groups. In addition, it would also be useful to be able to share entire chambers and have the chamber name and secrets be visible to users to whom it was shared.

 

I guess what I would like to see is the ability for the administrator to create a series of secrets and chambers and to then assign different levels of access across individual users and user groups/roles. When access is delegated to a chamber then the user should see that chamber and its contents under their own account.