Skip to main content
AccessOwl integrates with LastPass to provision and deprovision user access in your LastPass organization.

Capabilities

Provisioning

AccessOwl creates user accounts with the specified roles/permissions during access requests.

Deprovisioning

AccessOwl disables members in your LastPass organization during access revocations.

Prerequisites

  • Admin or Super Admin access to your LastPass organization, so you can invite the integration account and assign it an admin level.

Setup

1

Add LastPass in AccessOwl

Either add a new application or open Applications and click the +-symbol, then continue.
2

Invite the integration account and assign it as Admin

AccessOwl shows you the integration account’s email address. In the LastPass Admin Console at admin.lastpass.com:
  • Go to Users in the left navigation.
  • Click Add Users.
  • Enter the integration account’s email address.
  • Click Send Invitation.
Once the integration account has activated its account, assign it the Admin level:
  • Go to Users > Admin levels.
  • Select the Admin level.
  • Click Assign users, select the integration account, and confirm.
The integration account is assigned the Admin level because that role grants the permissions to add, manage, and disable users across your LastPass organization, which AccessOwl uses to provision and deprovision access. The Admin level is preferred over Super Admin as it covers all user management permissions without granting access to billing and account-ownership settings.