Adding users or user groups to an entitlement
When you add users to an entitlement, you are specifying which people can request passwords to the accounts governed by the selected entitlement's access request policies, or which people can request sessions for the accounts and assets governed by the selected entitlement's access request policies. A user can be a Sessions Appliance certificate user. For more information, see Session Appliances with SPS link.
It is the responsibility of the Security Policy Administrator to add users to entitlements. The Security Policy Administrator only has permission to add groups, not users. For more information, see Administrator permissions.
To add requester users to an entitlement
- Navigate to Security Policy Management | Entitlements.
- In Entitlements, select an entitlement from the list and click the Users tab.
- Click Add Users or Add User Groups from the details toolbar.
- Select one or more users or user groups from the list in the Users or User Groups dialog.
- Click OK.
Deleting an access request policy
IMPORTANT: When you delete a policy, Safeguard for Privileged Passwords deletes it permanently, but it does not delete the accounts governed by the policy.
To delete an access request policy from an entitlement
- Navigate to Security Policy Management | Entitlements.
- In Entitlements, select an entitlement from the list and open the Access Request Policies tab.
- Select a policy.
- Click Delete.
- Confirm your request.
Modifying an access request policy
Access request polices can be migrated. For more information, see Creating an access request policy.
To modify an access request policy
- Navigate to Security Policy Management | Entitlements.
- In Entitlements, select an entitlement and open the Access Request Policies tab.
- Double-click a policy, or select a policy and click Edit.
- Select the tab of the policy's information you want to modify.
Copying an access request policy
You cannot copy a policy and add it to another entitlement; policies are entitlement-specific.
To copy an access request policy
- Navigate to Security Policy Management | Entitlements.
- In Entitlements, select an entitlement from the list and open the Access Request Policies tab.
- Choose a policy and click Create a New Access Policy from the Selected Row.
- Edit the new policy's settings as desired.