Admin ConsoleMore

Organizations FAQs

This article contains Frequently Asked Questions (FAQs) regarding organizations.

For more high-level information about organizations, refer to the following articles:

Organizations general

Q: What's the difference between organizations and premium?

A: Organizations enable secure sharing from organizations to organization users.

Premium individual plans unlock premium password security and management features, including advanced 2FA options, the Bitwarden authenticator (TOTP), encrypted file attachments, and more. Premium individual does not include secure data sharing.

Paid organizations (Families, Teams, or Enterprise) automatically include premium features (advanced 2FA options, Bitwarden authenticator, and more) for every user enrolled in the organization.

Organization administration

Q: My organization's owner is no longer with the company, can a new owner be created?

A: Only an owner can create a new owner or assign owner to an existing user. For failover purposes, Bitwarden recommends creating multiple owner users. If your single owner has left the company, contact us.

Q: I have invited users but they cannot see shared items, what do I do?

A: Invited users will receive an email asking them to join the organization. First, make sure they have accepted the invitation. If they have, an admin or owner should navigate to the Members tab and use the Options menu to select Confirm.

Q: What events are audited for my organization?

A: For a full list of what's included in Bitwarden event logs, see Event Logs.

Q: Can I prevent users from self-registering into my organization?

A: If you are self-hosting, configure the environment variable globalSettings__disableUserRegistration= to true to prevent users from signing up for an account via the registration page. Once configured, organization admins or owners must invite users to signup for an account on the self-hosted instance.

Q: How do I change the name of my organization?

A: To change the name of your organization:

  1. In the web vault, open your organization.

  2. Navigate to the organization's Settings page.

  3. Edit the Organization name field and select the Save button.

If you are self-hosting, you will also need to:

  1. Navigate to the BillingSubscription page.

  2. Select the Download license button to download a license with the updated organization name.

  3. Upload the new license to your self-hosted server.

Q: How do I optimize performance for a vault with lots of items?

A: Since decryption of vault items is done locally, never in our servers, load times may occasionally be longer for a vault with a large number of items. Our team is always working on performance optimization, however here are a few tips that can help reduce load times:

  • Follow the principle of least privilege, for example by using collections to organize your vault items. Reducing the number of items a user can access will reduce the number of items to be decrypted while the app is loading.

  • For owners and admins, don't use the This user can access and modify all items option. These user roles get access to everything via the organization vault anyway, so selecting this options will only add additional items to their Vaults view and increase the number of items to be decrypted while the app is loading.

  • If you manage multiple organizations, consider contacting us to become a Provider. Accessing organizations from the Provider Portal will slightly reduce the amount of required to decrypt all managed items.

Sharing with an organization

Q: How do I "unshare" an item from my organization?

A: To unshare an item:

  1. Clone the item back to your individual vault by navigating to your organization vault (by selecting Organizations from the menu bar, not by using organization Filters) and selecting Clone from the Options menu for the item you want to clone. Only users with user type admin or higher can clone items into their individual vault by changing the Ownership setting.

  2. Delete the item from the organization vault by selecting Delete from the same menu.

Alternatively, you can unshare items by moving them to a different collection with higher access control restrictions.

Q: How do I hide a password from my organization's users?

A: Assign the users you want to hide passwords from either Can view (except passwords) or Can edit (except passwords) permission to relevant collections.

Q: Does an item I move to the organization stay after I leave?

A: It does! When a user shares an item with an organization, the organization takes ownership of the item. Even if the user leaves the organization or deletes their account, that item will remain in the organization vault.

Organization installations

Q: Can I silently install the Bitwarden desktop app for my users?

A: Yes. When silently installing the desktop app across workstations, please do so as a privileged account like an administrator and use the /allusers switch in addition to /S, as /S defaults to a single-user installation, which will cause issues in automated deployments.

© 2023 Bitwarden, Inc.