In our organization we provision our users through Azure AD, and thus the Azure group the users are provisioned from is available in LastPass. This means that anyone enrolled in LastPass has the ability to share their passwords, shared folders etc, with everyone in our LastPass enterprise.
What i would like to see is an admin policy that allows us to prohibit sharing to specific groups and users, so that we can filter out the primary Azure groups used for provisioning, but still allow other groups to be shared with and used.
