Capabilities
Provisioning
AccessOwl creates user accounts with the specified roles/permissions during access requests.
Deprovisioning
AccessOwl disables members in your LastPass organization during access revocations.
Prerequisites
- Admin or Super Admin access to your LastPass organization, so you can invite the integration account and assign it an admin level.
Setup
Add LastPass in AccessOwl
Either add a new application or open Applications and click the +-symbol, then continue.
Invite the integration account and assign it as Admin
AccessOwl shows you the integration account’s email address. In the LastPass Admin Console at admin.lastpass.com:
- Go to Users in the left navigation.
- Click Add Users.
- Enter the integration account’s email address.
- Click Send Invitation.
- Go to Users > Admin levels.
- Select the Admin level.
- Click Assign users, select the integration account, and confirm.
The integration account is assigned the Admin level because that role grants the permissions to add, manage, and disable users across your LastPass organization, which AccessOwl uses to provision and deprovision access. The Admin level is preferred over Super Admin as it covers all user management permissions without granting access to billing and account-ownership settings.

