Organization admin can see all the collections

[Volnorez3142]

Hi!

In Bitwarden I could create collections that could be managed by a specific group, and even org admins wouldn't be able to enter those collections. This was crucial in enterprise use. However, in Vaultwarden I seem to lack this option.
I found the ORG_GROUPS_ENABLED environment variable, which turned on the groups no problem, and I can assign access to a specific collection for a group, however, no matter what I do, the admins and the owners of the org also have access to this collection.
Is there something I'm missing? How do I have an org admin that can at least create a collection and assign accesses to it, but won't be able to look into every single collection? Ideally, we need to isolate admins/owners from collections that aren't directly assigned to them.

Thank you!

[BlackDex]

You can't. Vaultwarden does not have that feature currently.
It's still working on the old style access rights Bitwarden had.

[Volnorez3142]

Thanks for the quick reply.
Are there any workarounds on this? Or maybe there is a date when you're planning to add it to VW?

[BlackDex]

Nope, and nope.

Adding this feature is a lot of work as it has impact on a lot of locations in the code base. There are also other roles which needed to be added, and that takes a lot of time and effort to code correctly.