Automated Keeper Shared Folder Access Review
Every Monday, WebRun opens Keeper Security, walks each shared folder, lists the users and teams that can still open it and the permission level they hold, compares that against your current staff list, sends you a Twilio text about anyone who should clearly be gone, and posts the full access review to Telegram.
How do I review who still has access to shared password folders?
WebRun opens Keeper Security every Monday, walks each shared folder, and lists the users and teams that still hold access along with their permission level. It texts the admin via Twilio about leavers who still have vault access and posts the full review to Telegram, so credentials get removed on the right week.
- Leavers still holding vault access are named the Monday after they go
- Every shared folder carries a current member and permission list
- Edit rights that should be view-only are flagged for downgrade
Built for security administrators · IT teams · compliance managers · growing companies
What does WebRun do on every run?
The exact actions WebRun takes, in order - in plain language, so you can adjust anything.
-
WebRun signs in and gets to work
Opens
keepersecurity.com/vaultin a real browser with your saved login - no setup, no API keys. -
1
Keeper Security - read shared folder access
keepersecurity.com
WebRun opens Keeper Security to read shared folder access. - Open Keeper Security and go through each shared folder in the vault
- List the users and teams with access to each folder and the permission level they hold
- Note how many records sit inside each folder so the reach of the access is clear
- Compare the member list against the current staff and contractor list you provide
- Flag anyone who has left, changed role, or holds edit rights where view would do
Done when Every shared folder has a full member list with permission levels and flagged names.
-
2
Twilio - text the urgent removals
twilio.com
WebRun opens Twilio to text the urgent removals. - Send the security admin a short text when a leaver or ended contractor still holds vault access
- Name the person, the folder and the permission level in the text
- Keep the text to the admin's own number. WebRun never texts the person being reviewed
- Send nothing on a week where no urgent removal is found
Done when The admin has been texted about every clearly overdue removal.
-
3
Telegram - post the full review
telegram.org
WebRun opens Telegram to post the full review. - Post the full review: every shared folder with its members, teams and permission levels
- Put the folders holding the most records first, since those carry the most risk
- List the recommended removals and downgrades as a checklist for the admin to work through
Done when The full access review is posted to Telegram with the removals listed.
How is each run configured?
Secure by default
Connect once, stays signed in
WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.
Every action is checked against this policy before it runs.
Questions, answered
Will it remove anyone's access on its own?
No. WebRun never revokes access, never changes a permission level and never deletes a record. It produces a reviewed list and names the removals. Every change stays a deliberate admin action in Keeper Security.
Does it read the passwords inside the folders?
No. It reads folder membership and permission levels, and counts how many records a folder holds. Credential values are never read, copied or reported anywhere.
Who gets the text and who gets the review?
Both go to you. The Twilio text goes to the security admin's own number for urgent removals only, and the full review posts to your internal Telegram. Nobody being reviewed is ever contacted.
Related templates
Put this on autopilot.
Turn it on in minutes - or have our team set it up for you.