RoboForm for Business allows companies to assign and share RoboForm Files to their users. RoboForm files can be assigned to individual users or shared with groups of users. In both cases, the admin can set the permission levels for the assigned RoboForm files.
In order to assign or share a RoboForm file to a single user or a group of users, the company admin must first create one or more groups. Groups are created from the RoboForm for Business company admin interface.
At the time of the group's creation, the admin must assign the group a name and the default permission levels for the RoboForm files that will be shared to the group members.
Values that need to be set at the time of the groups creation are:
a) Group Name
b) Storage Type
The Storage type defines the location that the RoboForm files assigned or shared with users will be stored.
Server: RoboForm files assigned or shared to the users via group membership will only be stored in the company's online account. Users will never have a local copy of the these RoboForm files stored in their computer. RoboForm files assigned or shared with users in "Server" storage format will only be available to end users while they are online.
Synced: RoboForm files assigned or shared to the users via group membership will be stored in the company's online account and a copy of these files will be copied to user's local machine. RoboForm files assigned or shared with users in "Synced" storage type mode will be available to end users whether they are online or offline.
c) Usage Permission
Usage permission defines the level of RoboForm file access assigned or shared with users via group membership.
Limited: RoboForm files shared or assigned to users in "Limited" permission mode will allow users to use the RoboForm files, but it will restrict the user's ability to edit and view the values within them.
If Limited permission is enforced on RoboForm logins, then it will restrict the user's ability to view and edit the passwords and other values stored within the RoboForm logins assigned to them.
Limited usage permission enforced on RoboForm bookmarks, safenotes, identities, and contacts will restrict the user's ability to edit RoboForm files of this type assigned to them.
Regular: RoboForm files shared or assigned to users in "Regular" permission mode will allow users to use and view these RoboForm files and also change values stored within them (such as usernames and passwords). These changes will then be propagated to other members of the group automatically and in real-time.
d) Allowed IP
IP allowance define the IP addresses and ranges from which the RoboForm files assigned or shared with them via group membership will be visible. This restriction does not apply to company admins.
Note: This setting will only prevent users from seeing the data shared in this group. To prevent users from accessing their RoboForm account while outside a desired IP address range, please consult the "Allowed IP address Ranges" policy. More information about RoboForm policies can be found here.
e) Mobile Device Allowance
If checked, then this setting will limit the users ability to view and use RoboForm files assigned or shared with them via group membership while using any of the devices or web browsers that have been checked.
Note: This setting will only prevent users from seeing the data shared in this group. To prevent users from accessing their RoboForm account from a mobile platform, enable the "Disable Mobile Platforms" policy. More information about RoboForm policies can be found here.
Once groups are created please read this article on how to assign users to groups and how to assign RoboForm files to groups.