Types of administrators in the Enpass Business Admin Console

Enpass Business includes two administrator roles (Admin and Super Admin), and once integrated with Enpass Hub is enabled, include two more (Recovery Admin and Infrastructure Manager). Each kind of admin has different privileges:

Enpass Super Admin

By default, the first Admin created is automatically a Super Admin, and can designate other Super Admins.

An Enpass Super Admin has unlimited access to all sections of the Enpass Admin Console, and can...

• Add, manage and remove Users and Groups
• Manage Policies for Vaults, Encryption, and Security
• Manage Item Sharing and Sync
• Manage Settings and User Provisioning
• Manage other administrators
• Manage Branding and Billing

And for Business accounts using Microsoft 365 or Google Workspace for data storage, Super Admins can...

• Manage Feature Management, Access Recovery, and Vault Sharing
• Access Security Audit, including password health and risk assessments
• Add or remove Recovery Admins

NOTE: All Super Admins should be added as Recovery Admins as well, but do not automatically have Recovery privileges (see below).

Enpass Admin

An Enpass Admin can...

• Add, manage and remove Users and Groups
• Manage Policies for Vaults, Encryption, and Security
• Read more about the Enpass Admin Console

 

Recovery Admin (only clients using Enpass Hub)

• Can review and approve Master Password reset requests (except their own)
• (This role can be assigned to any admin or trusted user)
• Read more about Access Recovery in Enpass Business

 

Infrastructure Manager (only clients using a Self-Hosted Enpass Hub)

• Can access the Feature Management section of the Enpass Admin Console to set up Enpass Hub
• Read more about setting up Enpass Hub integration

 

---

Related topics

• Managing policies in Enpass Admin console
• Managing groups in Enpass Admin console
• User Devices screen in Admin Console
• Using the Admin Console Dashboard in Enpass Business