A Chamber is created by an admin or a user with the appropriate Vault role, given a name and an optional description, then populated with Secrets. Users or user groups are added to the Chamber with a permission level: view, edit, or manage. When a new Secret is added to a Chamber, all Chamber members automatically gain the same access level to that Secret. A Single Secret can belong to more than one Chamber, inheriting the most permissive access from any Chamber that includes it.
Chambers are best suited when a defined group of people consistently needs the same set of credentials, for example a DevOps team that manages all staging server logins, or a finance team that accesses all banking portals. Create one Chamber per functional group or project rather than one Chamber per department, so that access can be removed surgically when someone changes roles without disturbing unrelated credentials.
Chamber access is cumulative with direct Secret shares: removing a user from a Chamber does not revoke access if they also hold a direct share on individual Secrets within it. Always audit both Chamber membership and direct shares when revoking access. Chambers cannot be nested in Zoho Vault’s standard model; all Chambers sit at the same flat level. Password Policies applied to a Chamber override individual Secret policies unless explicitly exempted at the Secret level.
By default, any Vault user can create a personal Chamber to organise their own Secrets. However, admins can restrict Chamber creation to specific roles if the organisation wants centralised control over the folder structure. Enterprise plans provide more granular role-based controls over who can create, rename, or delete Chambers.
When a Secret belongs to multiple Chambers, a user who is a member of both Chambers receives the higher of the two permission levels for that Secret. If one Chamber grants view-only and another grants edit, the user can edit the Secret. This additive model means you should design Chamber membership carefully to avoid unintended privilege escalation.
Aaxonix is a certified Zoho implementation partner based in Pune. Architecture-first, no surprises.