Search

Groups and how to use them

Groups can be used to control how users can access shared data, and to sync users from your Azure AD via a SCIM integration.

Groups can be managed in the Uniqkey Admin Portal -> Organisation -> Groups here.

 

Types of groups

  • Group synced from your Azure AD to Uniqkey. Any members of the group in Azure will be automatically added to Uniqkey alongside the group itself. 

    Changes to group membership in Azure will be synced to Uniqkey. 
    Non-SCIM employees can be added manually.
     
  • Group manually created in the Uniqkey admin portal. Both SCIM users and non-SCIM users can be added to this group, but it's not possible to automatically add SCIM users to non-SCIM groups.

 

Settings overview

Group settings can be managed here: Organisation -> Groups -> [group name] -> Settings.

Settings name Description
Allow secure data management Allow data to be stored in the group.

If the setting is active and greyed out, it means data is already saved in the group.

Remove any existing data from the group first from the Logins/Payment cards/Secure notes tab -> click to mark the data -> Remove.
Allow trusted browser Allow data in this group to be cached in the user's browser when they activate Trusted Browser.
Allow export of logins Allow members of the group to export logins.
Allow custom name (SCIM only) Change the display name for the group.
Require mobile authentication Show group and data to phoneless users and SSO users. If this is disabled, only employees using the Uniqkey mobile app can access data. 

Using the Uniqkey mobile app is always the most secure option.
Allow View and Copy Allow members to view and copy data.
Allow Add and Edit Allow members to create new data and edit existing data.
Allow Delete Allow members to delete data from the group. 

Deleted data will be stored in the Uniqkey admin portal as "unmanaged" until an admin deletes it. 

 

 

SCIM groups

Examples of how to use SCIM groups.

  • If you want to create a group with the only purpose of syncing users from Azure to Uniqkey, you can hide it from the Uniqkey platforms.

    Required settings:
    Allow secure data management = Disabled.
     
  • If you already have groups of employees in your Azure that you'd like to use in Uniqkey as well (for example, different departments), you can sync these and allow members to manage shared data.

    Required settings:
    Allow secure data management = Enabled.
    Allow View and Copy = Enabled.
    Allow Add and Edit = Enabled.

    Optional settings:
    Allow trusted browser = Enabled.
    Allow Delete = Enabled.

 

Uniqkey groups

Examples of how to use Uniqkey groups.

  • Create groups and add relevant members, and allow them to manage shared data.

    Required settings:
    Allow secure data management = Enabled.
    Allow View and Copy = Enabled.
    Allow Add and Edit = Enabled.

    Optional settings:
    Allow trusted browser = Enabled.
    Allow Delete = Enabled.
     
  • Create groups with preexisting data and allow group members access without permission to edit.

    Admins can preemptively import/create data in groups they're a member of. It's possible to import logins (username, password, 2FA) via the Uniqkey browser extension. Credit cards and secure notes can be created via the Uniqkey mobile app, browser extension, and the Admin Portal.

    Guide for import can be found here.
    Guide for creation of data can be found here.

    Required settings:
    Allow secure data management = Enabled.
    Allow View and Copy = Enabled.
    Allow Add and Edit = Disabled.
    Allow Delete = Disabled.

    Optional settings:
    Allow trusted browser = Enabled.