Pretty interesting that you use "1password (PeopleOps vault)". I guess I never thought about using PW-vaults in a corporate setting. Seems like an interesting approach (compared to some alternatives I know that don't work well).
You can add people to specific vaults and it works really well.