Access map
Who can reach what, and who actually saw it.
A permission table only says "can access". Passhield also records and shows whether a person actually saw a password, or only filled it with the extension.
Permission levels
Four levels, set per vault.
Use: fills with the extension without seeing the password. Reveal: sees and copies. Edit: adds and changes items. Manage: shares and exports the vault.
The intern signs in to the marketplace panel without knowing the password; the accountant manages their own vault without seeing marketing's passwords.
Which level when?Tools that keep access in order
Groups
Accounting, Marketing, Interns. Access is granted to the group; when membership changes, access changes on its own.
Timed access
Give a grant an end date. When it runs out, access closes on its own and is recorded.
Access requests
An employee asks for timed access to a vault with a reason; the vault manager approves or declines.
Exposure
For every item and person: saw, used, or no access yet. When the password changes, everyone's exposure resets.
Ownerless item warnings
Items without an owner, or whose owner has left, are reported and handed over.
Access review
A round every three months: an admin confirms or removes each vault membership, and the result goes into the compliance report.
Admins do not see passwords by default either
Owners and admins can see the organisation's vaults and item names; to see a vault's passwords they need a permission on that vault. They can grant themselves one when needed, and that is recorded in the audit log too.
Questions about permissions
How is exposure worked out?
Every time a person's device fetches an item's current password from the server, it is recorded with its purpose: viewing, copying, editing or exporting counts as "saw"; filling with the extension or generating a code counts as "used". When the password changes, the count starts over.
How do I give an agency or a contractor access?
Invite them to the organisation and grant access only to the vault they need, with an end date. When it runs out, access closes on its own; when the work is done, close their trail with offboarding.
What happens if I remove someone from a group?
Their access to vaults reached through that group closes. For passwords they saw, a vault key renewal and, where needed, a password change are recommended.
Does the "use" permission hide the password completely?
It prevents accidental viewing but does not stop someone knowledgeable and malicious, because the password reaches the device to be filled. That is why Passhield records use too and suggests changing those accounts at offboarding.
Make access visible.
The access map records every access from the first day.