This article is for admins of professional plans.
Explore plans and pricing

In the Users tab of the Admin Console, admins can view and edit the settings of all members of their plan.

Download our e-book on ways to improve employee onboarding and offboarding

Onboard new plan members

The Users tab provides a clearer view of the onboarding activity for your plan members. The Users tab helps you to see how many people who were invited to your organization have joined your plan.

Want to add more plan members? Select Manage invites in the top-right corner of the page, then Add users.

More about how to invite members to your professional plan

You can also integrate Dashlane with your Identity Provider (IdP)

Manage all plan members

The Users tab helps you monitor information about each member of your plan, including their security score, last activity, and admin rights.

Use the search bar to find a plan member. You can also use the filters to sort plan members by Active users, Pending invites, or Removed users.

Export a CSV of plan members

You can export a list of your plan members to a CSV. To export, go to the Users tab and select Download user list (CSV).

The CSV includes the following information about each member:

• Dashlane account email address
• Plan membership status
• Number of logins they have in Dashlane
• Status of their 2-factor authentication enrollment
• Number of weak, reused, or compromised passwords, as shown in their Password Health score
• Their latest Password Health score
• Status of their SSO enrollment
• Account recovery status
• Their last activity date

Monitor security scores

To learn more about an individual plan member's overall password security strength, check their current security score in the Password Health score section of the Users tab. As long as the member has at least five logins in their vault or, if they have Spaces, in their Business Space, you'll see one of the following three icons next to their score:

• A green shield indicates strong overall password security
• An orange shield indicates fairly strong overall password security
• A red shield indicates weak password security

Knowing your organization's current Password Health score is important, but tracking it over time can be critical. With the Insights Dashboard, you can provide actionable insights and measurable results to leadership about how you've helped secure your organization by identifying employees with poor password habits.

More about managing your organization's overall security score

More about improving Password Health

Risk Detection visibility

After setting up Risk Detection, admins of organizations with Credential Protection can see how many of their vault users are visible to Risk Detection in the Users page of the Admin Console.

Learn more about Risk Detection visibility

Types of roles and how to change members’ rights

There are two types of roles that professional plans can have:

• Members: This role can access and share items in their vaults, but can’t access the Admin Console.
  Get started as a member
• Admins: This role can have full access to the Admin Console for managing plan members, groups, and billing information.
  Admin Help Center

Organizations with Password Management or Credential Protection can have this additional role:

• Group Managers: This role has access to the Groups tab in the Admin Console. Any changes made by a Group Manager are recorded in the Activity Log of the Admin Console.

Role-based access control (RBAC)

Admins and Group Managers can manage group members. Admins can give access to selected sharing groups to each Group Manager they assign.

Admins can choose between two permission sets for Group Managers:

1. All Groups permissions: The Group Manager can manage all groups, create new ones, and add or remove plan members to the groups.

2. Specific Group permissions: Admins designate which specific groups a Group Manager can oversee.

   

   For Specific Group permissions, the Group Managers can:

   • Update group names for their selected groups
   • See only their groups in the Admin Console
   • Add or remove plan members to their groups in the Admin Console

More about managing groups

You can have an unlimited number of any of these roles. We recommend having at least two admins on your plan in case one admin leaves your organization.

Note: Admins can also assign one person on the plan to be the billing contact.
More about the billing contact

Admins can change the rights of individual members in the Admin Console:

1. Select Users in the Admin Console.
2. Select the 3-dot icon for the member whose rights you want to change.
3. Select Change user rights, and then either Admin, Group Manager, or Member.

4. Select Update.

   

Admins can also change the rights of members in bulk in the Admin Console:

1. Select Users in the Admin Console.
2. Select the checkbox for all members whose rights you want to change.
3. Select With selected..., then Change rights to, and then either Admin, Group Manager, or Member.

4. Select Change rights.

   

Check the status of an invite

The Users tab helps you to see the status of your pending invites to new members:

• If your invitation is still pending, you can resend it by selecting the 3-dot icon next to the Rights column and then selecting Resend invite.
• If the member has already accepted the invite, you'll see their last update time in the Last activity column.

Remove a member from your professional plan

When an employee leaves your organization, or you remove a member from your professional plan, you can take action to ensure that all data is transferred and protected:

How to offboard and remove members

If you’re an admin of an organization with Password Management or Credential Protection that doesn’t use self-hosted SSO you can view the login list of your plan members. With login list visibility, you’ll see the plan members’ login names and the date they were created. This way you can check which business logins they need to share with other plan members before you remove them from the plan.

Login list visibility

Change the login email address for plan members

Admins of professional plans without SCIM, AD Sync, or Self-hosted SSO turned on can change the login email for a plan member. Plan members can then log in to their Dashlane accounts using the new email address.

Learn how to change the login email address for plan members

Generate 2FA recovery codes for your members

If you enforce 2-factor authentication (2FA) for your plan, and a plan member lost their device or can’t retrieve their recovery code, you can generate 2FA codes for them so they can regain access to their account. These steps walk you through how to generate recovery codes and what members need to do with them to regain access to their accounts. The member who lost access to their account must also complete some steps as part of this process, including disabling and re-enabling 2FA.

More about enforcing 2FA

More about 2FA in Dashlane

Note: If the member forgot their Master Password instead, you can help them with admin-assisted recovery. To use admin-assisted recovery, the member of your plan has to turn it on when prompted before they forget their Master Password.
Recover a member’s account with admin-assisted recovery

1. Select the Dashlane D icon in your browser’s toolbar and enter your admin Master Password if prompted. In the Dashlane browser extension pop-up, select More and then Open the Admin Console.

2. Select Users, select the 3-dot icon for the member you want to generate a code for, and then select 2FA recovery codes. A pop-up appears with five recovery codes.

   Note: This option is available only to plan members with 2FA enabled.

3. Share all five recovery codes with the member. You can paste them into a message or select Download recovery codes and share the downloaded file.

   

4. Ask the member to select the Dashlane D icon in their browser’s toolbar and enter their account email, if prompted. A pop-up asks them to verify the device with a recovery code.
5. Ask the member to select Use recovery code, paste one of the recovery codes you sent them, and then enter their Master Password to log in.

6. Ask the member to turn off 2FA for their account using a different one of the recovery codes you sent them.

   Turn off 2FA

7. Ask the member to turn on 2FA again.

   Turn on 2FA