One Identity Safeguard for Privileged Passwords 7.4

One Identity Safeguard for Privileged Passwords 7.4 - Appliance Setup Guide

Package contents Front and back panels Operating conditions and regulatory compliance Setting up the hardware appliance Lights Out Management (BMC) Warnings and precautions Standardized warning statements for AC systems

Virtual machine

Using the virtual appliance and web management console Setting up the virtual appliance Support Kiosk Virtual appliance backup and recovery

Completing the appliance setup Cloud deployments

Cloud deployment considerations AWS deployment Azure deployment OCI deployment Virtual appliance backup and recovery

System requirements and versions

Web client system requirements Web management console system requirements Supported platforms Licenses Long Term Support (LTS) and Feature Releases

Accounts tab (partitions)

The Accounts tab displays the accounts assigned to the selected partition.

NOTE: By default, all accounts associated with an asset are assigned to the same profile, but you can reassign them. For more information, see Creating a password profile.

To access Accounts:

web client: Navigate to Asset Management > Partitions > (View Details) > Accounts.

Table 64: Partitions: Accounts tab properties
Property	Description
Name	The account name.
Domain Name	The domain name of the account if the account is an Active Directory account. Used to help determine uniqueness.
Parent	The partition in which the asset where the account resides.
Password Profile	The name of the profile that manages the account.
SSH Key Profile	The name of the SSH key profile that governs the accounts assigned to a partition.
Service Account	A check in this column indicates that the account is a service account.
Password Request	A check in this column indicates that password release requests are enabled for the account.
Session Request	A check in this column indicates that session access requests are enabled for the account.
SSH Key Request	A check in this column indicates that SSH key release requests are enabled for the account.
Disabled	A check in this column indicates the account is disabled.
Password	A check in this column indicates a password is set for the account. For more information, see Checking, changing, or setting an account password.
TOTP Authenticator	A check in this column indicates a TOTP Authenticator is set for the account. For more information, see Setting a TOTP authenticator.
SSH Key	A check in this column indicates an SSH key is set for the account. For more information, see Checking, changing, or setting an SSH key.
API Keys	A check in this column indicates an API key is set for the account. For more information, see Checking, changing, or setting an SSH key.
Description	Descriptive information entered when the account was added.
Tags	The tags associated with the account.

Use these buttons on the details toolbar to manage the accounts assigned to the selected partition.

Table 65: Partitions: Accounts tab toolbar
Option	Description
New Account	Add accounts to the selected partition. For more information, see Adding an account to a partition.
Delete	Remove the selected account from the partition.
View Details	View additional information on the selected account.
Account Secrets	Menu options include: Check Password Change Password Check SSH Key Change SSH Key
Access Request	Select an option to enable or disable access request services for the selected partition. Values are derived from whether the platform of the asset indicates it supports any of the following: Password Request, SSH Key Request, Session Request. You can enable or disable Password Request, Session Request, and SSH Key Request, as needed. Service Accounts are created when the Asset is created and by default are not enabled for session or password access. Discovered Accounts are controlled by the Account Discovery template that is used in discovering the accounts. They are a property of the rule template of the Account Discovery job. For more information, see Adding an Account Discovery rule.
Discover SSH Keys	Run the SSH Key Discovery job associated with the account.
Enable-Disable	Select Enable to have Safeguard for Privileged Passwords manage a disabled partition. Select Disable to prevent Safeguard for Privileged Passwords from managing the selected partition.
Export	Use this button to export the listed data as either a JSON or CSV file. For more information, see Exporting data.
Refresh	Update the list of asset accounts.
Search	To locate a specific asset account or set of accounts in this list, enter the character string to be used to search for a match. For more information, see Search box.