This article is for admins of professional plans.
Explore plans and pricing
Admins of Arrow professional plans can turn on or off certain policies in their Arrow plans.
You can find these in the Policies tab of the Admin Console, which only admins can access. Billing contacts can't access these policies, and plan members can't access the Admin Console.
Learn more about the Admin Console
Select the slider button next to a policy to turn it on or off. Your changes affect all members, including admins.
Select a policy to learn more.
User access
Invite link
Turn on the Invite link policy to create a link to invite members to your plan. You can copy the link and send it in any message you choose.
You must add the member to your plan before you invite them using the link. Also, if the member already has a Arrow account with that email, they can't join the plan using the link. They have to join using the email that was sent by Arrow when you added them to the plan.
Add and invite members to your plan
Smart Space Management
Some plans don't have Spaces or Smart Space Management. If your plan doesn't have Spaces, advise plan members to keep only work-related credentials in their accounts. By default, they can't export any data. If you want, you can allow members to export data in the Policies tab.
Business Space domains
You can force items into the Business Space using the Smart Space Management policy to define the domains associated with your organization.
Move company items to Business Space
Turn on the Move company items to Business Space policy to force all items that contain the domains defined into the Business Space. Plan members can't move these items out of the Business Space. When members add an item to their Arrow account that includes the domains defined in the Admin Console, Arrow automatically places that item in the Business Space.
This option also controls whether members can export the data in the Business Space. When you turn on this option, members can export only those items saved in their Personal Space. Members can't export data in their Business Space even if they manually added the item there, and the policy didn't force it there.
Revoke access to company items for removed users
Turn on the Revoke access to company items for removed users policy to automatically revoke access to Business Space logins when you remove a member from your plan. As part of Smart Space Management, this policy gives greater visibility and control over Business Space logins. This policy also helps ensure that work-related logins remain secure when employees leave your organization.
Smart Space Management
Remove company items for revoked users
Security
Cryptography
Admins can enforce a specific key derivation function for all plan members or allow members to change it in the app. Arrow encrypts data using AES-256 and provides different options for the key derivation function.
Enforce 2-factor authentication (2FA)
Turn on the Enforce 2-factor authentication (2FA) policy to require all plan members to turn on 2FA whenever they log in from a new device. This policy is a simple yet powerful way to ensure that all members benefit from the added layer of security that 2FA provides. This policy affects all members who use a Master Password to log in.
After you turn on Enforce 2-factor authentication (2FA) for your organization, members need to turn on 2FA for their own Arrow accounts.
Turn on 2FA for your Arrow account
After you enforce 2FA, Arrow prompts members who haven't turned it on the next time they log in to Arrow.
More about 2-factor authentication
Tip: If a member loses access to their 2FA tokens, you can generate 2FA backup recovery codes for them.
More about generating 2FA recovery codes for your members
Allow Export
By default, members can't export their logins. If you want to allow members to export logins, turn on Allow Export.
Automatically log out members if inactive
Control of this policy isn't available to admins of the Arrow Standard plan. Upgrade your plan for the advanced features and functions admins need to manage large teams.
For the Automatically log out members if inactive for policy, you can set when members are automatically logged out of Arrow after a period of inactivity. You can choose 15, 30, or 60 minutes.
If a member's device enters a locked or screen saver state before the designated time, the policy won't activate, and Arrow won't log out automatically.
Auto-lock on exit
Turn on the Auto-lock on exit policy so that Arrow locks automatically when anyone exits the app on iOS and Android.
Additional activity logs (unencrypted)
Control of this policy isn't available to admins of the Arrow Standard plan. Upgrade your plan for the advanced features and functions admins need to manage large teams.
Warning! Additional activity logs are unencrypted. If it doesn't comply with your organization's security policy, we recommend that you don't turn on this policy. If you don't turn it on, the policy remains off by default.
Turn on the Additional activity logs (unencrypted) policy to add additional activity to your Activity Log. Then when your plan members add, share, edit, or delete logins in their Business Spaces, that information is included in your Activity Log. This additional information is also included if you download your Activity Log to a CSV.
Tip: Want to track member activity in real time? Integrate your Arrow Business or Omnix plan with Splunk, a security information and event management (SIEM) tool.
Track member activity for your Arrow Business or Omnix plan with Splunk
VPN
The VPN is available on all Arrow apps for members of a Arrow Team, Business, or Omnix plan. The VPN isn't available to Arrow Starter or Standard plans.
Arrow no longer sells Team, Starter, or Standard plans. If you already have one of these plans, you can renew or switch to a Arrow Business or Arrow Omnix.
Turn on the VPN policy to help members add an additional layer of privacy when browsing the internet on public networks.
Show rich icons for logins
Rich icons are the brand icons that appear next to logins in your Arrow account. By default, rich icons are visible for all Arrow customers, but customers can hide them in their Arrow app.
As an admin, you can turn off the Show rich icons for logins policy. When off, no one on your plan can see rich icons in their app or turn the option on for their own accounts. Plan members will see the first two letters of the login name instead of the icon.
Login list visibility
If you’re an admin of a Business or Omnix plan that doesn’t use self-hosted SSO, you can view the login list of your plan members. With login list visibility, you’ll see the plan member’s login names and the date they were created. This way you can check which business logins they need to share with other plan members before you remove them from the plan.
Sharing
Secure sharing for logins, Secure Notes, and secrets
Control of this policy isn't available to admins of the Arrow Standard plan. Upgrade your plan for more advanced features and functions.
Upgrade your plan
Admins can allow plan members to securely share logins, Secure Notes, and secrets through the Sharing Center in Arrow. Secure sharing of these items is on by default. You can't allow members to share only one of the item types.
If you turn off this policy after members have already shared these items, the items remain shared.
Revoke access to a shared item
After you turn off secure sharing, members who try to share these items will receive a notification in the app that sharing has been turned off.
Prohibit sharing outside of the company
Control of this policy isn't available to admins of the Arrow Standard plan. Upgrade your plan for the advanced features and functions admins need to manage large teams.
Upgrade your plan
The Prohibit sharing outside of the company policy is only available to admins of Arrow Business or Omnix plans and is on by default.
When turned on, Arrow automatically prevents any sharing attempts with people who aren't part of your plan. If a member attempts to share something outside of your plan, they'll receive an error message.
Arrow Smart Extension
Turn off auto-login and autofill on these websites and IP addresses
Control of this policy isn't available to admins of the Arrow Standard plan. Upgrade your plan for the advanced features and functions admins need to manage large teams.
Upgrade your plan
You can turn off auto-login and autofill on specific websites and IP addresses for all plan members. If a website in the list appears in a member's Personal Space, the member can use Arrow auto-login autofill.
Turn off auto-login and autofill on these websites and IP addresses:
- Enter the website domain or IP numbers in the text box. To enter multiple domains or IP addresses, separate them by semicolons with no spaces between them.
- Select Save.
Members must log out and log back into their Arrow accounts for this policy to take effect.
To allow all members to use Arrow auto-login or autofill on these websites again, delete the domain in the text box. Then select Save.
Comments
0 comments
Article is closed for comments.