All templates
For IT administrators, security teams & compliance managers

Keep a live record of who can see which vault

Once a month, WebRun opens your Bitwarden organisation, reads every member and the collections each one can reach, writes the full access map into an Airtable base, compares it against last month's snapshot, and books a short Google Calendar review slot listing exactly what changed.

  • No credit card
  • Under $0.01 per run
  • Cancel anytime
14,115 templates Safe automation No code
First Monday of every month at 9:00 AM WebRun
1 Bitwarden read members and collections
2 Airtable log the access map
3 Google Calendar book the review slot
Run a sample
In short

How do I run a monthly review of who can access which password vault?

WebRun opens Bitwarden once a month, reads every organisation member and the collections each can reach, and writes the access map into Airtable. It compares the snapshot against last month, then books a Google Calendar review slot naming who was added, removed, or changed.

  • Access changes are caught within a month, not at audit time
  • Every review starts from a written snapshot instead of a live scramble
  • Pending invites and over-broad access surface without anyone hunting for them

Built for IT administrators · security teams · compliance managers · small business owners

Step by step

What does WebRun do on every run?

The exact actions WebRun takes, in order - in plain language, so you can adjust anything.

  1. WebRun signs in and gets to work

    Opens vault.bitwarden.com in a real browser with your saved login - no setup, no API keys.

  2. 1
    Bitwarden - read members and collections
    bitwarden.com
    WebRun in Bitwarden: read members and collections
    WebRun opens Bitwarden to read members and collections.
    • Open the Bitwarden web vault and switch to your organisation
    • Open Members and capture each person, their role, and their status
    • Open Collections and capture which collections each member and group can reach
    • Note anyone still invited but never accepted, and anyone with no collection at all

    Done when Every organisation member is listed with their role and the collections they can reach.

  3. 2
    Airtable - log the access map
    airtable.com How to Automate Airtable
    WebRun in Airtable: log the access map
    WebRun opens Airtable to log the access map.
    • Open your access-review base and add this month's snapshot rows
    • Record the member, role, status, and collection list for each person
    • Compare against last month's snapshot and mark each row as added, removed, or changed
    • Flag pending invites and anyone whose access grew since the previous run

    Done when This month's access map is in Airtable with every change marked against last month.

  4. 3
    Google Calendar - book the review slot
    calendar.google.com How to Automate Google Calendar
    WebRun in Google Calendar: book the review slot
    WebRun opens Google Calendar to book the review slot.
    • Create a short access-review event on your usual review day
    • Put the count of added, removed, and changed members in the title
    • List the flagged people and the link to the Airtable snapshot in the description
    • Leave the event on your own calendar without inviting anyone else

    Done when A review slot is on your calendar with this month's changes written into it.

Run settings

How is each run configured?

Starting pageWhere Chrome opens at the start of each run
vault.bitwarden.com
ScheduleRuns automatically on this cadence
First Monday of every month at 9:00 AM
DeliveryHow each run's result reaches you
Access map · Airtable
OutputWhat each run produces - A monthly Airtable snapshot of every Bitwarden member and the collections they can reach, plus a calendar review slot naming what changed.
Text
Setup & safety

Secure by default

Connect once, stays signed in

WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.

Your credentials stay in your own private environment - WebRun never stores your passwords.
Strict Lockdown

Every action is checked against this policy before it runs.

Domains ALLOWLIST
Typed input ALLOW
Shell command BLOCK
File uploads BLOCK
Runs in a contained environment More on policies
Good to know

Questions, answered

Will it remove anyone's access on its own?

No. WebRun only reads your Bitwarden members and collections and records what it finds. Revoking access, changing a role, or deleting a member is always left to you in the review slot it books.

Does it read the passwords inside the vault?

No. It reads the membership and collection structure, meaning who can reach which collection. Item contents stay untouched, and nothing from a vault item is copied into Airtable or the calendar.

How does it know what changed?

It compares this month's snapshot against the previous month's rows in Airtable and marks each member as added, removed, or changed, so the review only asks you about real differences.

Put this on autopilot.

Turn it on in minutes - or have our team set it up for you.