Keeper for Teams and Small Business

This quick start guide will help get your small business team up and running with Keeper Business in just minutes

Video Demo: Teams and Small Business

This video will demonstrate all that Keeper has to offer your small business and provide you with step-by-step instructions to get your team up and running in no time.

Short on time? Check out our 3 minute demo here.

Admin Console Overview

When you first log in to the Admin Console, you will land on the Dashboard which will provide an overview of high level data on your user activity and overall security status.

The Dashboard provides oversight of the following:

  • Top Events and link to Timeline Chart

  • Security Audit Overall Score

  • BreachWatch Overall Score

  • User Status Summary

The Admin tab is where majority of your set-up and user deployment will take place. Here, is where you can access Nodes, Users, Roles, Teams and Two-Factor Authentication Settings.

Key Configuration Steps

As a first step, we recommend uploading your company logo to the vault and customizing the email invitation that will invite your employees to create their Keeper Vault. These configurations are highly recommended as they have shown to help with quick user adoption of Keeper's software.

Click Configuration then click Edit next to "Company Logo" to upload your image file.

Once uploaded, your company logo will appear in the upper left side of the header when users are logged into their Keeper Web Vault and Desktop App.

Organizational Structure

In Keeper's architecture, Roles allow you to define enforcement policies based on a user's job responsibility as well as provide delegated administrative functions. The number of roles you create is a matter of preference and/or business need.

Nodes are used to organize your users into distinct groupings, similar to organizational units in an Active Directory. You can create nodes based on location, department, division or any other structure. Smaller organizations may choose to administer Keeper as single level, meaning no additional nodes are created. In this scenario, all provisioned users are accessed from the default "Root Node".

Secondary Keeper Administrator

We recommend you create a secondary Keeper Administrator as soon as possible. At its simplest configuration, the Keeper Administrator role is applied to the initial administrator who has set up the Keeper account for the organization as well as any other user you grant full admin rights. We strongly recommend you add a second user to the Keeper Administrator role in case one account is lost or no longer accessible.

Admin > Users > + Add Users enter the user's full name and email address, then click Add

Select the new user from the list and click OK to finish.

This will generate an email inviting the users to setup their Keeper account.

Account Transfer

Account Transfer will allow a Keeper Administrator to transfer records and data from one user to another, should an employee leave the company. It is an optional, but highly recommended feature that should be configured by the Keeper Administrator during the initial deployment phase of the Keeper rollout. The Account Transfer setup must be configured prior to the user's account being transferred.

First you will need to enable the Transfer Account permission for the Keeper Administrator Role.

The Transfer Account permission is NOT enabled by default and must be manually activated by the Admin.

Admin > Roles > Keeper Administrator

Check the box next to "Transfer Account" and click OK

To learn more about Account Transfer, click here.

Roles

Roles allow you to define enforcement policies based on a user's job responsibility as well as provide delegated administrative functions.

You will need at least one role defined for your users, but you can create as many as you would like depending on the structure of your organization. Roles can be created to support a variety of policies depending on what enforcements should be applied to a user based on their position (e.g. Administrators, Executives, Managers, Staff, and Contractors). For smaller organizations, Keeper recommends you create a default, "General Employee" role.

Admin > Roles > + Add Role

Select the Node you want to add the Role to, enter the name of the role and click Add

To learn more about Roles, click here.

Nodes

Nodes are used to organize your users into distinct groupings, similar to organizational units in an Active Directory. You can create nodes based on location, department, division or any other structure.

Smaller organizations may choose to administer Keeper as single level, meaning no additional nodes are created. In this scenario, all provisioned users are accessed from the default "Root Node" (e.g. ACME Co.).

Admin > + Add Node

Enter the name of the Node then click Add Node to finish.

At any time, you can change which node you are viewing by navigating to or selecting the Nodes on the far left Node pane. To navigate to the root node or top level, select your business name (e.g. ACME Co.) in the navigation tree.

To learn more about Nodes, click here.

Role-Based Access Controls

Role-based Access Controls (RBAC) provide your organization the ability to define Enforcements Policies based on a user's job responsibility as well as provide delegated administrative functions.

Enforcement Policies offer a wide-range of control features that are organized into the following categories:

  • Login Settings

  • Two-Factor Authentication (2FA)

  • Platform Restriction

  • Vault Features

  • Record Types

  • Sharing & Uploading

  • KeeperFill

  • Account Settings

  • Allow IP List

  • Keeper Secrets Manager

  • Transfer Account

Admin > Roles select a role then click Enforcement Policies

A dialogue box will appear where you can configure the Enforcement Policies that will be applied to the selected role. Click Done when finished.

To learn more about Enforcement Policies, click here.

Deploying Keeper to Your Employees

Business customers can seamlessly deploy Keeper to their users using two different methods. Admins can either manually invite individual users or bulk import users via a CSV file. Advanced deployment options are also available.

Admin > Users > + Add Users

Select the Node you would like to add the user to, enter their Full Name and Email Address then click Add

This will generate an email inviting the user to setup their Keeper account. Instructions to customize the email can be found in the Key Configuration Steps section, above.

Teams

Next, we encourage you to create Teams. The purpose of creating teams is to give users the ability to share the records and folders within their vaults with logical groupings of individuals. The administrator simply creates the team, sets any Team Restrictions (edit/viewing/sharing of passwords) and adds individual users to the team. Teams can also be used to easily assign Roles to entire groups of users to ensure the consistency of enforcement policies across a collective group of individuals.

Admin > Teams > + Add Team

Select the Node you want to add the team to then enter the name of the team and click Add Team

You can then set the following team-level restrictions:

  • Disable record re-shares

  • Disable record edits

  • Apply privacy screen

Team-to-role mapping allows organizations to assign users directly to teams that can be assigned custom roles. With team-to-role mapping, a user who is a member of a team that is assigned to a role, will assume the enforcements of the given role.

It's important to note, that Keeper implements Least-Privileged policies, so when a user is a member of multiple roles or teams, their net policy is most restrictive or least privileged.

To learn more about teams and team-to-role mapping, click here.

Enable Two-Factor Authentication

As a final step to further enhance your security practices, we recommend that you require the use of Two-Factor Authentication across your organization. This role enforcement can be enabled within each role's Enforcement Policy settings.

Admin > Roles select the target role and click Enforcement Policies

Toggle "Require the use of Two-Factor Authentication" on.

Set your platform-specific enforcements, enable the desired 2FA methods then click Done

Last updated