Emergency Access - Break-Glass Account

Emergency Access - Break-Glass Account

(Available in Professional and Enterprise Editions)


Enterprise passwords are mission-critical for companies of all sizes and types, so they need to be available around the clock to tackle potential crises. If a user with access to critical passwords is unavailable to share them with you (for example, on a vacation), the productivity of your entire enterprise could be affected. Zoho Vault bails you out in such moments by allowing super admins to nominate themselves or specific users as emergency contacts. These emergency contacts can temporarily access all enterprise passwords in Zoho Vault. 

Configuring emergency access

  1. Select Settings, then click Emergency access under the Admin configurations section.
  2. Click Add under the Emergency contacts section, then add the users as emergency contacts.
  3. Set the validity of the emergency access for the emergency contact, then click Add contacts. The user's emergency session will end after this specified time limit.


Note: A new emergency contact can declare an emergency only after 24 hours of being added as an emergency contact. 


How to declare an emergency?

An emergency contact can declare an emergency as follows:

  1. Select Settings, then click Emergency access from the Admin configurations section.
  2. Select the Emergency access tab, then click Declare emergency.
  3. Enter a valid reason for declaring the emergency, then click Declare Emergency.


The emergency contact can view all the enterprise passwords in the organization for the time period specified during configuration. All users in the organization will be notified through email when an emergency is declared.


Terminating an invalid emergency access

Super admins can forcefully end an emergency access, as well as remove the corresponding user from emergency access contact list if their reason for declaring an emergency is found to be invalid. As a super-admin, you can:

  1. Select Settings, click Emergency access from the Admin configurations section, then select the Emergency contact that declared an emergency
  2. Select Emergency declared, then click Revoke emergency access.
  3. If you wish to delete an emergency contact, select Settings, click Emergency access from the Admin configurations section, select the Emergency contact, then click Delete.

    • Related Articles

    • Offline account access using OneAuth

      If you are trying to login to your account but do not have internet access on your mobile device, you can still login to your Zoho account using an offline token provided by the OneAuth app. How can I access my account offline? When you try signing ...
    • Access Devices

      Access devices from Zoho Assist website Go to www.assist.zoho.com. Log in to your account using Zoho Assist credentials. Navigate to Unattended Access. Click CONNECT beside the computer you want to connect to.
    • Implementation or Troubleshoot Access

      You can provide temporary access of your Orchestly account to our technical support team to help build workflows in your organization or troubleshoot issues.  How to provide access Navigate to your Profile at the upper-right corner of the page and ...
    • Refreshing Access Tokens

      Access tokens expire an hour after they are generated. To generate a new access token, use the refresh token you generated earlier. Note:  You must use your domain-specific Zoho Accounts URL to refresh your access token. For ...
    • Overview of Guest Access

      Guest Access     The Guest Access feature lets your team work together with external stakeholders like investors, consultants, contract employees, etc. by adding them as guests, or restricted guests to one, or more groups in your Zoho Connect ...