So it turns out that someone in the role "Password User" can export all the passwords they have access to. This stunned me as I thought PMP was supposed to be about securing passwords!!

I found in the admin > export\offline access options there is a way to prevent this, however it also stops super admins (ie. me) from exporting passwords which seems odd.

I have unchecked the option to export all passwords but how do I configure it so that super admins can export, but not password admin, password users and password auditors cannot?

Thanks