> ## Documentation Index
> Fetch the complete documentation index at: https://docs.accessowl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# LastPass

AccessOwl integrates with LastPass to provision and deprovision user access in your LastPass organization.

## Capabilities

<CardGroup cols={2}>
  <Card title="Provisioning" icon="user-plus">
    AccessOwl creates user accounts with the specified roles/permissions during access requests.
  </Card>

  <Card title="Deprovisioning" icon="user-minus">
    AccessOwl disables members in your LastPass organization during access revocations.
  </Card>
</CardGroup>

## Prerequisites

* **Admin** or **Super Admin** access to your LastPass organization, so you can invite the integration account and assign it an admin level.

## Setup

<Steps>
  <Step title="Add LastPass in AccessOwl">
    Either add a new application or open Applications and click the +-symbol, then continue.
  </Step>

  <Step title="Invite the integration account and assign it as Admin">
    AccessOwl shows you the integration account's email address. In the LastPass Admin Console at [admin.lastpass.com](https://admin.lastpass.com):

    * Go to **Users** in the left navigation.
    * Click **Add Users**.
    * Enter the integration account's email address.
    * Click **Send Invitation**.

    Once the integration account has activated its account, assign it the Admin level:

    * Go to **Users** > **Admin levels**.
    * Select the **Admin** level.
    * Click **Assign users**, select the integration account, and confirm.

    <Note>
      The integration account is assigned the Admin level because that role grants the permissions to add, manage, and disable users across your LastPass organization, which AccessOwl uses to provision and deprovision access. The Admin level is preferred over Super Admin as it covers all user management permissions without granting access to billing and account-ownership settings.
    </Note>
  </Step>
</Steps>