Grant or remove access to apps

Password vaulted apps were available in Cloud Identity Premium edition until June 2022. Shutdown of this feature started on September 21, 2022, and will complete by June 21, 2023. Learn more

From the password vaulted apps page, you can grant or remove access to various apps for specific users or groups.

Important: Before you grant or remove access to apps, you need to set up a new group structure in the Google Admin console that’s designed specifically for password vaulted apps. For instructions, see Get started with password vaulted apps.

Grant access to users or groups

You can assign all users in a group the same credential to an application, or—if it’s more convenient for you as an administrator—you can assign apps with individual credentials, which enables users to add their own username and password to the application.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsPassword vaulted apps.
3. Click one of the apps on the password vaulted apps page.
4. Click the Assignments panel.
5. From the panel on the left side of the page, search for a group that you set up that's designed specifically for password vaulted apps, and select that group.
6. If you want each user to enter their own username and password to configure this app, click Individual credentials. If you want to assign all users in this group the same username and password to access this app, click Same credential for everyone.
7. Click GRANT ACCESS.
   
   Important: Groups can inherit access to apps through their membership in other groups. So if you grant access to a group that contains child groups, members in the child group will also get access via inheritance. In the table at the bottom of the app page, users are only listed if they have access to this app via the selected group. (For more details about how nested groups behave, see Add a group to another group.) 

Remove access for users or groups  

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsPassword vaulted apps.
3. Click one of the apps on the password vaulted apps page.
4. Click the Assignments panel.
5. From the panel on the left side of the page, search for and select users or groups to view a list of users and credentials that have access to the selected application.
6. Click Remove access.
   
   If a group has multiple assignments, you’ll need to check the boxes for the assignments that you want to remove, and then click REMOVE.

Add credentials for individual users

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsPassword vaulted apps.
3. Click one of the apps on the password vaulted apps page.
4. Click the Assignments panel.
5. From the panel on the left side of the page, search for and select users or groups to view a list of users and credentials that have access to the selected application.
6. Click one of the groups to open a page that lists the users within that group.
7. From the Credential column, click Add credential.
8. Select an existing credential, or create a new credential.
9. Click SAVE.