Granular scope controls for Enterprise Policies (users/groups)

Feature Requests Password Manager
,
1

Currently, Bitwarden’s Enterprise Policies feature can only be applied on a global basis, but for some policies it would be useful to be able to limit their scope to either a specific group or user(s), such as the policy to disable personal vaults.

The intent for this change request is to enable flexibility for businesses to set up environments tailor made for accounts with special requirements, like managed role-based accounts that should only have a specific set of organisation logins available and no option to save accounts of their own.

As it stands a lot of trade-offs have to be made for clients due to the all-or-nothing setup, and it makes it difficult for us to prepare solutions that address edge cases.

1 Like
2

As we use bitwarden for different types of user (it, bussiness) it will be helpful to customize policies based on user or groups. e.g. some users should be able to use send, other not. or some users shoul have a specific session timeout others a different.

3

@Rene I moved your post into an existing feature request on the same topic.