Skip to content
PulsVaultDocs
Get started
PersonalPremiumFamilyTeamBusinessEnterprise

Access levels

What MANAGER, EDITOR, VIEWER, and LIMITED let a recipient do in practice, how to pick a level in the share dialog, and how to change it later.

Every share — vault or item — carries an access level that you pick in the share dialog. This page shows what each level means in practice; for the underlying permission model see Access levels & permissions.

The levels you can assign#

When sharing, the dialog offers four levels. OWNER is reserved for the vault's creator and is never assignable.

Level In practice, the recipient can…
MANAGER Everything an editor can, plus manage the vault's members and settings. On vaults where re-sharing is enabled, a manager can invite others.
EDITOR Open and decrypt items, create new ones, edit, and delete. No member or settings access.
VIEWER Open items and copy values — read-only. Nothing can be changed.
LIMITED Use credentials for autofill without ever seeing the plaintext password ("hide password" mode).
The ceiling is below OWNER

No access level assigned through sharing can delete the vault or take ownership. OWNER stays with the creator — this is a hard rule across the platform.

Choosing a level#

  • Handing a password to a family member to log in with? VIEWER — or LIMITED if they only need autofill and shouldn't read the secret itself.
  • Collaborating on a team vault where others add and update entries? EDITOR.
  • Delegating day-to-day administration of a shared vault? MANAGER — but note that in a vault context managers can add and remove members, so grant it sparingly.

Scope: vault vs. item#

  • A level on a vault share applies to every item in that vault, including items added later.
  • A level on an item share applies to that single item's snapshot only.
  • Secure links don't use access levels at all — they are always a read-only, one-time view.

Changing a level later#

You can change a member's level at any time without re-sharing:

  1. Open the vault's Sharing & members page, or Sharing → Manage → Sent for item shares.
  2. Pick the member and select a new access level.
  3. The change takes effect immediately — no new invitation is needed.

Every level change is recorded in the audit trail.

In organizations#

On Team, Business, and Enterprise plans, access levels combine with organization roles & permissions and shared-vault policies. A policy can require admin approval before a share — and its level — becomes active.

Was this page helpful?