Manually adding a tag to an account
Asset Administrators can manually add and remove static tags to an account. You cannot manually remove dynamically assigned tags which are defined by rules and indicated by a lightening bolt icon. You must modify the rule associated with the dynamic tag if you want to remove it. For more information, see Modifying an asset or asset account tag.
To manually add a tag to an account
- Navigate to Administrative Tools | Accounts.
- Select an account from the object list (left-pane).
- Open the General tab and scroll down to view the Tags pane.
- Click
next to the Tags title. Existing tags are displayed.
-
Place your cursor in the edit box and use one method:
- Enter the name of a tag.
- Start entering the name of the tag. As you type, existing tags that start with the letters entered appear. Select from the list.
- To add additional tags, press Enter before entering the next tag.
-
Click OK. If you do not see the new tag, click the
Refresh toolbar button.
-
To remove a manually assigned tag, click
next to the Tags title and click the X inside the tag box to be removed.
Adding an account to one or more account groups
From the Accounts view you can add an account to one or more account groups.
Select an account group to add to an account
- Navigate to Administrative Tools | Accounts.
- In Accounts, select an account from the object list and open the Account Groups tab.
- Click
Add Account Group from the details toolbar.
- Select one or more account groups from the list in the Account Groups dialog and click OK.
Create an account group to add to an account
If you do not see the account group you are looking for and you have Security Policy Administrator permissions, you can create an account group from the Account Groups dialog.
- Click
Add Account Group from the details toolbar.
- On the Account Groups dialog, click
Create New and enter the following information:
- Click Add Account Group.
- Continue to cCreate additional account groups, as required.
- Click OK in the Account Groups dialog to add the new account groups to the selected account.
Related Topics
Adding one or more accounts to an account group
Modifying an account
Once you add an account, you cannot modify an account's associated asset or its name, but you can modify other information.
To modify an account's information
Navigate to Administrative Tools | Accounts.
- To change the description, profile, or request settings, double-click the account from the object list, make the changes, then click OK.
- To view the selected account's password validation and reset history, switch to the Check and Change Log tab.
- To view or export the details of each operation that has affected the selected account, switch to the History tab. To export, select the time frame, then click
Export.
- Right-click the account name for these options:
Account Security: Menu options include:
- Check Password, Change Password, and Set Password. For more information, see Checking, changing, or setting an account password.
- Toggle Global Access: For more information, see Available for discovery across all partitions (Global Access).
- Check SSH Key, Change SSH Key, Set SSH Key: For more information, see Checking, changing, or setting an SSH key.
Password Archive: Display the password history for the selected account. For more information, see Viewing password archive.
SSH Key Archive: Display the SSH key history for the selected account. For more information, see Viewing SSH key archive.
Discover SSH Keys: Run the SSH Key Discovery job associated with the account. For more information, see SSH Key Discovery job workflow.
Access Requests: Allows you to enable or disable access request services for the selected account. Menu options include enable and disable password, session, and SSH key requests.
Show Disabled: Display the accounts that are not managed and are disabled and have no associated assets. Account management can be controlled by right-clicking on an asset and selecting
Enable-Disable.
Hide Disabled: Hide the accounts that are not managed and are disabled and have no associated assets. Asset management can be controlled by right-clicking on an account and selecting
Enable-Disable.
Deleting an account
When you delete an account, Safeguard for Privileged Passwords does not delete it from its associated asset; it simply removes it from Safeguard for Privileged Passwords.
If you delete a service account, Safeguard for Privileged Passwords changes the asset's authentication type to None, which disables automatic password and SSH key management for all accounts that are associated with this asset. All assets must have a service account in order to check and change the passwords or SSH keys for the accounts associated with it. For more information, see About service accounts.
To delete an account
- Navigate to Administrative Tools | Accounts.
- In Accounts, select an account from the object list
- Click
Delete Selected.
- Confirm your request.