Hello,

We were using the system when we realized that the "Export/Offline access" option is available to all users on the PMP system.

Thinking of improving security, we need all users denied access to export passwords. We need to configure the system only for admin users to have access to this permission.

We know the system has a configuration option to set this type of permission, but we need to understand how it works.

As we have the export permission set up today:

In the admin / Settings / Offline Export Access menu, we have the option "Allow administrators and users to export password information to plain text (.xlsx) spreadsheets" marked. The same option is true for user settings and user groups settings. So the option is available for all users.

To change the settings and turn the export option only to admins users and one User group, I 

I unchecked this option for all users individually and kept it checked for only one user group which we want to keep the export option available.

But the system doesn't available the export option to users in the user group with permission. It is only possible when we give the permission for users group and for the users in the group. If we give the permission only for the user group doesn't works.

Did we do the correct configuration?

If someone knows, clould explain how export/offline access works on the PMP system?

Best regards.