User Seats

The Bitwarden web app can be used to add members to your organization. To ensure the security of your organization and secure sharing of data, adding new members is 3-step process designed to maintain end-to-end encryption:

• Invite: Admins issue emails to users, inviting them to join the organization.

• Accept: Users interact with email invitations in order to begin joining the organization.

• Confirm: Admins confirm that the accepted users are authorized to join the organization.

To invite users to your organization:

1. Log in to the Bitwarden web app and open the Admin Console.

2. Navigate to the Members view and select the  Invite member button:

   

3. On the Invite member panel:

   • Enter the Email addresses where new members should receive invites. Add multiple members at one time by comma-separating email addresses.

   • Select the Member role to be applied to the new members. Member role will determine what permissions they will have at an organizational level.

   • In the Groups tab, select which groups to add these users to.

   • In the Collections tab, select collections to give these users access and what permissions they should have for each collection.

     note

     While member roles are set at an individual-member level, permissions can be set for an individual member or an entire group. Permissions assigned at the member level will override permissions set at a group level.

4. Click Save to invite the designated members to your organization.

note

Invitations expire after five days, at which point the member will need to be re-invited. Re-invite members in bulk by selecting each member and using the  Options icons to select Resend invitations:

If you're self-hosting Bitwarden, you can configure the invitation expiration period using an environment variable.

Invited members will receive an email from Bitwarden inviting them to join the organization. Clicking the link in the email will open the Bitwarden web app, where the user can log in or create an account to accept the invitation:

Users must fully log in to the Bitwarden web app to accept the invitation. When an invitation is accepted, users will be notified that they can access the organization once confirmed. Organization members will have their email automatically verified when they accept an invitation.

To confirm that the accepted users are authorized to join the organization:

1. In the Admin Console, navigate to the Members view.

2. Select any members marked Needs confirmation and use the  options menu to  Confirm selected:

   

3. Using a secure means of communication, validate with each new member that the fingerprint phrase displayed to you at this stage matches what they can find in their in Settings → My account view. Each fingerprint phrase is unique to an account, and ensures a final layer of oversight in securely adding users. If they match, select Submit.