Feature: Share Admin
Keeper's Share Admin capability empowers designated administrators to have enhanced control over shared records and folders.
Share Admin is a role-based permission in Keeper that allows designated administrators to manage shared folders and record permissions across the organisation, without granting unrestricted admin rights or access to the contents of users' vaults.
Share Admins can access all shared folders and records, regardless of ownership. From the Vault, they can search and review shared content, understand access relationships and identify any misalignment with policy.
Admins can add or remove users and records from any shared folder, clean up access as teams change and remove unnecessary shares without needing help from record owners.
Record-level permissions, such as view, edit and share, can be updated directly by Share Admins. They can also adjust default settings on shared folders to prevent misconfigurations or restrictive policies that disrupt collaboration.
Share Admins have full edit rights and can transfer ownership of individual or multiple records at once. This enables clean handoffs without moving entire vaults or escalating through account recovery.
Roles with Share Admin permissions are configured in the Admin Console. Once applied, users immediately gain full management rights over the records or folders they're added to.
No. The Share Admin policy only provides elevated privileges for records that have already been explicitly shared with the admin. It does not grant access to any records by default.
Yes, within the bounds of the permission set, Share Admins can modify sharing settings, including removing users or adjusting edit/share rights and record ownership.
Yes, Share Admin does not provide decryption capabilities. All content remains encrypted unless explicitly shared with the administrator.
From the Keeper Admin Console, navigate to the desired role and enable Share Admin under Administrative Permissions. The permission can be scoped to a specific node and optionally cascaded to sub-nodes.
We recommend assigning Share Admin to security, IT or operations personnel responsible for enforcing sharing policies and managing the access lifecycle.
You must accept cookies to use Live Chat.