Automated LastPass Stale Access Review
Every Monday, WebRun opens LastPass, reviews shared folders and who has access to them, flags anyone who has left the company or changed roles, creates a Trello card for IT to revoke each one, and sends you a WhatsApp heads-up on what's pending.
How do I find out who still has LastPass access after they've left or changed roles?
WebRun reviews LastPass shared folders every Monday, checks who has access against your current team roster, and creates a Trello card for IT to revoke access for anyone who has left or changed roles. It never removes access itself and never reads the passwords stored inside a folder, only who can open it.
- Stale access is flagged the same week someone leaves or changes roles
- IT works from one Trello queue instead of manually auditing every folder
- No password or vault content is ever read, only access lists
Built for IT admins · security teams · people operations · small business owners
What does WebRun do on every run?
The exact actions WebRun takes, in order - in plain language, so you can adjust anything.
-
WebRun signs in and gets to work
Opens
www.lastpass.comin a real browser with your saved login - no setup, no API keys. -
1
LastPass - review shared folder access
lastpass.com
WebRun opens LastPass to review shared folder access. - Open LastPass and review who has access to each shared folder
- Cross-check members against your current team roster
- List anyone who has left or changed roles but still has access
Done when Every shared folder's access list has been checked against the current roster.
-
2
Trello - queue access to revoke
trello.com
WebRun opens Trello to queue access to revoke. - Open the IT access review board in Trello
- Create a card for each person flagged, naming the folder and why
- Assign the card to IT, left open until access is revoked
Done when Every flagged access grant has a Trello card assigned to IT.
-
3
WhatsApp - send you the heads-up
whatsapp.com
WebRun opens WhatsApp to send you the heads-up. - Send you a WhatsApp message with the count of pending revocations
- Note anything that has been sitting open for more than a week
- Skip sending anything the week nothing new is flagged
Done when You have this week's pending-revocation count in WhatsApp.
How is each run configured?
Secure by default
Connect once, stays signed in
WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.
Every action is checked against this policy before it runs.
Questions, answered
Does WebRun revoke the access itself?
No. WebRun only flags stale access and queues it as a Trello card. Actually removing someone from a shared folder is always a manual step IT takes in LastPass.
Does it ever read the passwords in the shared folder?
No. WebRun only reads who has access to a folder, never the passwords or items stored inside it.
What if someone flagged still needs access?
Close the Trello card instead of actioning it. WebRun won't re-flag the same person unless their status changes again.
Related templates
Put this on autopilot.
Turn it on in minutes - or have our team set it up for you.