Chat now with support
Chat mit Support

Safeguard for Privileged Passwords On Demand Hosted - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Getting started with the desktop client Using the desktop client Activity Center Search box Privileged access requests Toolbox Accounts Account Groups Assets
General/Properties tab (asset) Accounts tab (asset) Account Dependencies tab (asset) Owners tab (asset) Access Request Policies tab (asset) Asset Groups tab (asset) Discovered SSH Keys (asset) Discovered Services tab (asset) History tab (asset) Managing assets
Asset Groups Discovery Entitlements Linked Accounts Partitions Profiles Settings
Access Request settings Appliance settings Asset Management settings Tags Backup and Retention settings Certificates settings Cluster settings Enable or Disable Services settings External Integration settings Password Management settings Real-Time Reports Safeguard Access settings SSH Key Management settings Security Policy Settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions About us

Profiles

Within the web client, the Profiles page displays information on the currently configured profiles in use by Safeguard for Privileged Passwords.

To access Profiles:

  • web client: Navigate to Asset Management | Profiles.

The Profiles page is separated into three sections:

Password Profiles (profiles)

Within the web client, the Password Profiles tab on the Profiles page displays information on the currently configured password profiles in use by Safeguard for Privileged Passwords.

To access the Password Profiles tab on the Profiles page:

  • web client: Navigate to Asset Management | Profiles which by default displays the Password Profiles tab. If needed, you can use the partition drop-down to select the parent partition of the profile (by default all profiles are displayed). Select a profile, then click to display additional information and options.

Selecting one of the profiles displays the following information:

Toolbar

Use these toolbar buttons to manage profiles:

  • New Profile: Add profiles to Safeguard for Privileged PasswordsFor more information, see Adding an asset (desktop client).
  • Delete: Remove the selected profile.
  • Edit: Select a profile then click this button to open additional information and options for the profile.
  • Set as Default: Select a profile then click this button to set it as the default profile.
  • Refresh: Update the list of profiles.

When the Password Profiles tab on the Profiles page is selected, a View Password Profile Components link is available. For more information, see View Password Profile Components (profiles).

Properties tab (profiles)

The Properties tab lists information about the selected profile.

To access Properties:

  • web client: Navigate to Asset Management | Profiles | Password Profiles | (View Details) | Properties.

The following fields display based on the type of profile.

Table 150: Properties tab: General properties
Property Description
Name The profile's name.

Description

Description of the profile.

Partition The name of the partition where the selected profile resides.

Delete

Click this button to delete the selected profile.

The following information is also available on the General page:

Table 151: Properties tab: Check Password properties
Property Description

Check Password Settings

Name of the check password rule.

Description

Description of the check password rule.

Schedule

The schedule of the check password rule.

Table 152: Properties tab: Change Password properties

Change Password Settings

Name of the change password rule.

Description

Description of the change password rule.

Schedule

The schedule of the change password rule.

Table 153: Properties tab: Account Password Rule properties
Property Description
Account Password Rule Name of the account password rule.

Rule Summary

Summary of the account password rule.

Properties tab: Password Sync Groups properties
Table 154: Properties tab: Password Sync Groups properties
Property Description

Enabled

If Enabled is selected, the sync runs with the profile change schedule.

Status

The Status displays if all account passwords are in sync with the password sync group. The Status is if any password for any account within the sync group does not match the common password.

Name

The name of the password sync group.

Accounts The number of accounts to synchronize with a common password.

Next Sync

The date the sync group password will be synchronized across all accounts.

Description

Information about the rule.

Delete: Click this button to delete the selected profile.

Assets tab (profiles)

The Assets tab displays the assets assigned to the selected profile.

Click Add Asset from the details toolbar to add one or more assets to the selected profile.

To access Assets:

  • web client: Navigate to Asset Management | Profiles | Password Profiles | (View Details) | Assets.
Table 155: Profiles: Assets tab properties
Property Description
Name

The asset name.

Platform

The platform of the selected asset.

Disabled

A check in this column indicates the asset is disabled.

Product License

If applicable (for example, for a Windows asset), indicates your license model, such as System or Desktop.

Description

Descriptive information entered when the asset was added.

Use these buttons on the details toolbar to manage the assets assigned to the selected partition.

Table 156: Profiles: Assets tab toolbar
Option Description

Delete

Remove the selected asset.

When you delete an asset, you also permanently delete all the Safeguard for Privileged Passwords accounts associated with the asset.For more information, see Deleting an asset.

Edit

 

Access Request

Allows you to enable or disable access request services for the selected asset. Menu options include Enable Session Request and Disable Session Request.

SSH Host Key

 

Test Connection

Verify that Safeguard for Privileged Passwords can log in to the asset using the service account credentials that you have provided.

Syncronize Now

Run the directory addition (incremental) synchronization process by asset and account. The sync is queued by asset by provider and runs one directory sync on that asset at a time. You can run multiple syncs in parallel on different assets. This is the faster type of directory sync because deletions are not synced. A Tasks window displays the progress and outcome of the task. You can click Details to see more information or click Stop to cancel the task. In addition, this process runs through the discovery, if there are discovery rules and configurations set up.The API (Assets/Synchronize) can be used to run the deletion (full) sync which includes all deletions, additions, and changes. This sync takes longer (perhaps hours), especially the first time it is run based on your directory setup.

Discover Accounts

Run the associated Account Discovery job. For more information, see Account Discovery.

Enable-Disable

Select one of the following:

Select Enable to have Safeguard for Privileged Passwords manage a disabled asset. Account Discovery jobs find all accounts that match the discovery rule's criteria regardless of whether it has been marked Enabled or Disabled in the past.

Select Disable to prevent Safeguard for Privileged Passwords from managing the selected asset. When you disable an asset, Safeguard for Privileged Passwords disables it and removes all associated accounts. If you choose to manage the asset later, Safeguard for Privileged Passwords re-enables all the associated accounts.

Show Disabled

Display the assets that are not managed and are disabled and have no associated accounts. Asset management can be controlled by right-clicking on an asset and selecting Enable-Disable.

Hide Disabled

Hide the assets that are not managed and are disabled and have no associated accounts. Asset management can be controlled by right-clicking an asset and selecting Enable-Disable.

Refresh

Retrieve and display an updated list of assets associated with the selected partition.

Search

To locate a specific asset in this list, enter the character string to be used to search for a match. For more information, see Search box.

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen