vault
Subcommands
- vault create: Create a new vault
- vault delete: Remove a vault
- vault edit: Edit a vault's name, description, icon, or Travel Mode status
- vault get: Get details about a vault
- vault group: Manage group vault access
- vault list: List all vaults in the account
- vault user: Manage user vault access
vault create
Create a new vault
Flags
Valid icon keywords are: airplane, application, art-supplies, bankers-box, brown-briefcase, brown-gate, buildings, cabin, castle, circle-of-dots, coffee, color-wheel, curtained-window, document, doughnut, fence, galaxy, gears, globe, green-backpack, green-gem, handshake, heart-with-monitor, house, id-card, jet, large-ship, luggage, plant, porthole, puzzle, rainbow, record, round-door, sandals, scales, screwdriver, shop, tall-window, treasure-chest, vault-door, vehicle, wallet, wrench
vault delete
Remove a vault. Specify the vault to delete by name or ID.
A vault may be specified by name or ID.
vault edit
Edit a vault's name, description, icon, or Travel Mode status. Specify the vault by name or ID.
Flags
A vault may be specified by name or ID.
Valid icon keywords are: airplane, application, art-supplies, bankers-box, brown-briefcase, brown-gate, buildings, cabin, castle, circle-of-dots, coffee, color-wheel, curtained-window, document, doughnut, fence, galaxy, gears, globe, green-backpack, green-gem, handshake, heart-with-monitor, house, id-card, jet, large-ship, luggage, plant, porthole, puzzle, rainbow, record, round-door, sandals, scales, screwdriver, shop, tall-window, treasure-chest, vault-door, vehicle, wallet, wrench
vault get
Get details about a vault. Specify the vault by name or ID.
A vault may be specified by name or ID.
Use standard input to specify objects
If you enter a hyphen (-
) instead of a single object for this command,
the tool will read object specifiers from standard input (stdin).
Separate each specifier with a new line. For more information about how
to specify objects, run op help
.
You can also pass the command a list or array of JSON objects. The tool
will get an item for any object that has an ID, ignoring line
breaks. This is useful for passing information from one op
command
to another.
Examples
Get details for all vaults:
Get details for the vaults that a group has access to:
vault group
Subcommands
- vault group grant: Grant a group permissions to a vault
- vault group list: List all the groups that have access to the given vault
- vault group revoke: Revoke a portion or the entire access of a group to a vault
vault group grant
Grant a group permissions in a vault.
Flags
Permissions are specified in a comma separated list such as:
1Password Teams includes three permissions:
1Password Business includes the permissions above as well as more granular options:
allow_viewing
allow_editing
allow_managing
When granting or revoking permissions, some permissions require dependent permissions to be granted or revoked alongside them.
Learn more about managing vault permissions.
Examples
Grant a group certain permissions in a vault with a business account:
Grant a group certain permissions in a vault with a team account:
vault group list
List all the groups that have access to the given vault.
vault group revoke
Revoke a group's permissions in a vault, in part or in full.
Flags
Not specifying any permissions revokes the group's access to the vault.
Removing all existing permissions also revokes the group’s access to the vault.
Permissions are specified in a comma separated list such as:
1Password Teams includes three permissions:
1Password Business includes the permissions above as well as more granular options:
allow_viewing
allow_editing
allow_managing
When granting or revoking permissions, some permissions require dependent permissions to be granted or revoked alongside them.
Learn more about managing vault permissions.
Examples
Remove a group from a vault:
Revoke certain permissions from a group in a vault with a business account:
Revoke certain permissions from a group in a vault with a team account:
vault list
List vaults.
Flags
By default, returns all vaults the current user has read access to.
Examples
Get details for all vaults:
Get details for vaults that a group has read access to:
Get details for vaults that a user has read access to:
Only list vaults for which the user/group has a specific set of permissions:
vault user
Subcommands
- vault user grant: Grant a user access to a vault
- vault user list: List all users with access to the vault and their permissions
- vault user revoke: Revoke a portion or the entire access of a user to a vault
vault user grant
Grant a user permissions in a vault.
Flags
Permissions are specified in a comma separated list such as:
1Password Teams and 1Password Families include three permissions:
1Password Business includes the permissions above as well as more granular options:
allow_viewing
allow_editing
allow_managing
When granting or revoking permissions, some permissions require dependent permissions to be granted or revoked alongside them.
Learn more about managing vault permissions.
Examples
Grant a user certain permissions in a vault with a business account:
Grant a user certain permissions in a vault with a team account:
vault user list
List all users with access to the vault and their permissions.
vault user revoke
Revoke a user's permissions in a vault, in part or in full.
Flags
Not specifying any permissions revokes the user's access to the vault.
Removing all existing permissions also revokes the user’s access to the vault.
Permissions are specified in a comma separated list such as:
1Password Teams and 1Password Families include three permissions:
1Password Business includes the permissions above as well as more granular options:
allow_viewing
allow_editing
allow_managing
When granting or revoking permissions, some permissions require dependent permissions to be granted or revoked alongside them.
Learn more about managing vault permissions.
Examples
Remove a user from a vault:
Revoke certain permissions from a user in a vault with a business account:
Revoke certain permissions from a user in a vault with a team account: