Allow to disable emergency access in organization policy

To be able to strictly limit secret accesses to organization users, the organization policies should allow to forbid emergency access (for example, when the Single Organization policy is enabled).

When the policy “Account recovery administration” is enabled, if a user of the organization looses his access, an administrator is able to reset his access. The emergency access is in this case useless and unsafe because it permits to grant uncontrolled accesses to an organization vault.

2 Likes