Account Migration from Family to Business (MSP)

Purpose

This guide outlines how to seamlessly migrate a user from a LastPass Family plan to your MSP-managed LastPass Business account. It ensures users retain all vault content while switching to a business license and aligns with MSP best practices.

Prerequisites

1. Set up Federation and SSO for Lastpass MSP.
2. Protected users group should be assigned only to Licensed Business Premium Users.

Steps

1. Export the User’s Vault Data

• The initial

  Export stepuser isvault tovia My Vault → Account Settings → Export using CSV or encrypted file export allformat.

• Store the vaultexported datafile fromsecurely; you’ll need it for import (if in any case the currentpasswords usersdon't inappear theafter currentconversion)

  plan

2. Prepare a Temporary Admin Account

• Create a temporary admin accountuser in ouryour instanceMSP’s (MSPLastPass Account)Business soinstance.

  that
this
• can

  Provide bethese givencredentials to the client for verifyingvalidation thatafter migration.

3. Record Existing User Permissions

• Document the migrateduser’s passwordsfamily-related arepermissions, allshared infolders, place

or
• Checkadmin theroles currentto permissionsreplicate forlater.
  the users and note them down.

Ex:

4.

Remove allthe usersUser from the currentFamily planPlan

• From the Family dashboard, select the user and click Remove from Families.

• Confirm action. The user's account downgrades to a free license but retains vault data.

One user account should be assigned as an admin to remove other users. 

• Click on a user, and click on "Remove from Families" button



• Accept the confirmation and proceed removing the users from the current plan

Removing these users from any plan will convert their accounts from licensed to free. 

Removing users from an account won't delete the account data – it'll just reduce the features that come with a free account.

5. Trigger Activation via SSO/Provisioning

• After the
  removal
  • is

    The complete, usersuser will receive an activation emailsemail from thesince AD Lastpassprovisioning Provisioningand SSO (This stepfederation) is performedenabled.

    before the migration).
  • Once users

    The receiveuser their activation email, they canmust click the activation link inside it.

  • Then they will be prompted toand log intoin using their accountexisting with their current credentials 
    • User email which they were using previously to log into their lastpass instance
    • Master pasword which they were using previously to log into their lastpass instance
    credentials.

  • Then they

    They will besee informeda thatprompt: "“This account will be converted to a businessBusiness account"account” Select OK.

  • Then user

    On havere-login, their license status changes to selectBusiness. "OK"

    and

6. Repository Access & Permissions

• Re-assign any roles or permissions noted earlier.

• If using shared folders/groups, reassign access as needed within your MSP-managed tenant.

7. Verify Migration

• Ask the user willto getlog signedin outand verify that all their passwords, shared folders, and settings are present.

• Once that

  Use isthe done,temporary useradmin will haveaccount to sign in again and you will see that the userconfirm: license status has been changed to Business, and vault contents are intact.

8. Import Vault Data (Optional)

This is optional only if there are issues during the accounts conversion from Freefree to business.

• Log in as the temporary admin.

• Import the user’s vault data via My Vault → Import using the previously exported file. Ensure proper vault contents (passwords, notes, shared items) transfer accurately.