Skip to content

Commit 4be60ff

Browse files
committed
fix merge conflicts
2 parents dfc52fd + 5af306f commit 4be60ff

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

62 files changed

+7020
-2119
lines changed

account-management/README.md

Lines changed: 12 additions & 35 deletions
Original file line numberDiff line numberDiff line change
@@ -27,45 +27,22 @@ However, if you'd like to have your access revoked so that you are not directly
2727
* Note that even if you remove yourself from the vaults, members of the Owners and Administrators groups will still have "Manage Vault" permissions on these vaults, and will be able to manage their own or others' access to them.
2828
* To work around some current rate limiting issues related to permissions commands in the CLI, using the `--remove-me` flag will result in the script taking considerably longer to run (the script has an 11 second delay for each vault when modifying permissions to avoid rate limiting).
2929

30-
### [`vault-details.sh`](vault-details.sh)
31-
32-
When run by a member of the Owners group, this script provides the vault name, the number of items in the vault, the last time the vault contents were updated, and list which users and groups have access to that vault along with their permissions.
33-
34-
When run by a non-Owner, it will provide these details for all vaults the user running the script has access to.
35-
36-
### [`remove-export-all-groups-and-vaults.sh`](remove-export-all-groups-and-vault.sh)
37-
38-
When run by a member of the Owners group, this script will remove the `export items` permission for every vault that every group has access to without exception.
39-
40-
When run by a non-Owner, this script will remove the `export` permission on vaults that the person running the script also has the `manage vault` permissions for.
41-
42-
### [`vault-permission-change.sh`](vault-permission-change.sh)
30+
### [`remove-permissions-groups-and-vaults.py`](./remove-permissions-groups-and-vault.py)
4331

44-
This script, when run by an a user with the `manage vault` (manage access) permission, will remove or add the specified vault permission(s) for the specified group(s) from all vaults (excluding Private vaults). This could be useful if you are looking to systematically remove the Administrators `manage vault` (manage access) permission from all created shared vaults, this leaving this permission to the default owners group.
32+
#### Description
33+
When run by a member of the Owners group, this script will remove permissions for every vault that any group you select has access to.
4534

46-
### [`bulk-group-prefix-update.sh`](bulk-group-prefix-update.sh)
35+
When run by a non-Owner, this script will remove your selected permissions on vaults that the person running the script also has the `manage vault` permissions for.
4736

48-
This script, when run by an Owner or Administrator, will change the prefix of all group names according to your specifications. This is particularly helpful if you are needing to change an existing naming scheme.
49-
If you want to add prefixes where one doesn't already exist, then you can modify the `sed` substitution to: `sed 's/^/PREFIX/g'` to add a prefix to all groups.
50-
This does not change the name of any built in groups (e.g., "Administrators", "Owners", "Team Members").
37+
#### Requirements
38+
The Python script requires the `tqdm` package for progress bar functionality. Install it by running:
39+
```
40+
pip install -r requirements.txt
41+
```
5142

52-
### [`compliance-export.sh`](compliance-export.sh)
5343

54-
This script, when run by an adminstrator, will output all items within the specified scope (e.g., with a specific tag) as a long-formatted CSV. The export excludes any concealed fields such as password fields.
55-
This script may be helpful if you need to have someone verify the accuracy of the details of a 1Password item without revealing any secret values stored in that item.
56-
57-
## Considerations
58-
59-
The majority of the scripts here are best if run by someone belonging to the Owners group in 1Password. This is because only the Owners group is guaranteed to have at least `manage vault` permissions on every shared vault in a 1Password Business account. Running these scripts as a user not in the Owners group may result in incomplete information or in changes not being made for all vaults.
60-
61-
## Essential reading
62-
63-
In addition to the examples here, please review the complete documentation at developer.1password.com, especially:
64-
65-
* [op vault](https://developer.1password.com/docs/cli/reference/management-commands/vault)
66-
* [op group](https://developer.1password.com/docs/cli/reference/management-commands/group)
67-
* [op user](https://developer.1password.com/docs/cli/reference/management-commands/user)
44+
### [`vault-details.sh`](vault-details.sh)
6845

69-
## Events API
46+
When run by a member of the Owners group, this script provides the vault name, the number of items in the vault, the last time the vault contents were updated, and list which users and groups have access to that vault along with their permissions.
7047

71-
If you use a security information and events monitoring (SIEM) tool, you may be interested in the [1Password Events API](https://support.1password.com/events-reporting/).
48+
When run by a non-Owner, it will provide these details for all vaults the user running the script has access to.

account-management/remove-export-all-groups-and-vault.sh

Lines changed: 0 additions & 28 deletions
This file was deleted.

0 commit comments

Comments
 (0)