# Record and File Sharing

## Share a Record

A Keeper record can contain credentials, files, two-factor codes, privileged access capabilities, or any type of data. Keeper records can be shared individually with other users, or the records ownership can be transferred to other trusted users.&#x20;

In the example below, the record contains a login/password, Passkey (for MFA), a file attachment and a two-factor code.

Click the **Share** button.

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FEm8GtImNZPTbckHOy2Q7%2FScreenshot%202023-11-30%20at%2010.36.35%E2%80%AFAM.png?alt=media&#x26;token=9c082d0e-7f44-42f6-b3d1-b47ea1c0ced7" alt=""><figcaption><p>Sharing a Record</p></figcaption></figure>

From the "Add People" tab, click within the **email address field** and search or type the email address of the Keeper user you would like to share the record with.&#x20;

Click the dropdown arrow to set their permission level (can edit, share, edit & share, view only and transfer ownership) and click **`Add`**.&#x20;

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2F8BVeDjXkfieftI3DZc04%2FScreenshot%202023-11-30%20at%2010.38.03%E2%80%AFAM.png?alt=media&#x26;token=38e506da-3db7-42be-8016-df50277f53a2" alt=""><figcaption><p>Sharing Permission</p></figcaption></figure>

Sharing within an existing Keeper Enterprise tenant does not require any further steps. If you are sharing with a person outside of the tenant, you will first need to establish a "sharing relationship". The user will receive an email prompting them to login to Keeper and either accept or deny the share request. Once you establish a sharing relationship, the user will appear in the email dropdown list.&#x20;

### User Permissions

User Permissions are designed to control the permissions a user has over the record that is shared with them.&#x20;

| Permission Name    | Permission Level                                                          |
| ------------------ | ------------------------------------------------------------------------- |
| Can Edit           | User can edit this record                                                 |
| Can Share          | User can share this record                                                |
| Can Edit & Share   | User can edit and share this record                                       |
| View Only          | User can only view the record                                             |
| Transfer Ownership | User will obtain ownership of the record and control the user permissions |

### Share Admin Role

If the recipient of the shared record is part of the [Share Admin](https://docs.keeper.io/en/enterprise-guide/sharing/share-admin) role, they will inherit additional rights over the record content, ownership and permissions.

### Time-Limited Access

After a share is performed, users can assign permission on a time-limited basis and automatically rotate credentials post-expiration. [Learn more](https://docs.keeper.io/en/enterprise-guide/sharing/time-limited-access) about Time-Limited Access rights.

### Administrative Controls

The use of record and file sharing can be restricted by the Keeper Administrator in the [Roles](https://docs.keeper.io/en/enterprise-guide/roles) section of the Keeper Admin Console.

### Commander CLI

Record sharing commands are available from the [Keeper Commander](https://docs.keeper.io/secrets-manager/commander-cli/overview) CLI tool. This provides advanced users with the ability to script and automate any sharing actions.

For more info, see: [Commander Sharing Commands](https://docs.keeper.io/secrets-manager/commander-cli/command-reference/sharing-commands)

* [`share-record`](https://docs.keeper.io/secrets-manager/commander-cli/command-reference/sharing-commands#share-record-command)
* [`record-permission`](https://docs.keeper.io/secrets-manager/commander-cli/command-reference/sharing-commands#record-permission-command)
