How do I terminate a user?

To enable the transfer account feature please access your Admin Console. Then access the 'Keeper Administrator' role, refer to the 'administrative permission' section, hover over your company's name and click the settings gear. A pop up of the administrative permissions will appear, check the checkbox for transfer account and click save. You will then click the refresh button found above the 'license' tab within the top right of your admin console. Refer back to the 'keeper administrator' role, click enforcement settings, click account transfer tab, enable the account transfer by clicking toggle over to green then checking the circle for keeper administrator. You will then enable this same setting within the role that are your users are found in by following the same steps user role >enforcement settings>account transfer>enable. Users will then receive a notification that this has been enabled by the administrator the next time they login and their account status will appear as 'pending transfer acceptance' until they accept pop up. Users must click accept. They have 7 days to click accept; otherwise, their account becomes blocked. Of course, as a Keeper admin you can unblock their account by extending this pop up an additional 7 days. This is done within the admin console in the user's tab. Once the user accepts the acknowledgment pop up, you will be able to perform an account transfer whenever necessary for that user. Once the user accepts the account transfer invite you will log into your admin. console>select admin tab>select users tab>select the user you wish to transfer>user actions>lock the account FIRST>transfer account>select the vault of which you wish to transfer the users account. Once you select the account and select the transfer button, the account will then be automatically deleted. Please note that a user must remain inside of at least one role that has the transfer account feature enabled, in order for you to transfer their account. If you delete the only role that a user is residing in that to a role with the feature enabled, they will then have to accept the transfer account feature again. Please be sure to create a dummy vault to transfer the user's records into, if you do not wish to have you and the user's credentials you are transferring in the same vault. Please contact Enterprise Support any time you are thinking to transfer an account. If you are receiving the following error message when trying to transfer the user’s account: “This user is not in a role that has the 'Can Be Transferred' enforcement turned on.” If the user is still with your Enterprise: Please have the user log into their account to accept the transfer account agreement. You can then proceed to transfer the user’s account If the user is no longer with the Enterprise: Here at Keeper we exercise strict zero-knowledge policies. We do not store any user’s master passwords and/or security questions. The only way to gain access into a user’s account is by entering their master password correctly. Also, the only way to reset a user’s password is by answering their security questions correctly. You could always try contacting the vault owner and ask them for their master password and security answer, then when you login be sure to accept the account transfer invite. If you decide to delete the user without transferring their credentials: The user’s credentials that reside inside of a shared folder will remain. An admin, will then need to claim the ownerless records. Any credentials that are shared with other users in your enterprise, that do not reside inside of a shared folder, will need to be recreated by the user as their own. More information regarding Transfer Account Feature: https://docs.keeper.io/enterprise-guide/account-transfer-policy