Assets tab (profiles)
The Assets tab displays the assets assigned to the selected profile.
Click 
Add Asset from the details toolbar to add one or more assets to the selected profile.
To access Assets:
web client: Navigate to Asset Management > Profiles > Password Profiles > 
(View Details) > Assets.
Table 145: Profiles: Assets tab properties
| Name |
The asset name. |
|
Platform |
The platform of the selected asset. |
| Disabled |
A check in this column indicates the asset is disabled. |
|
Product License |
If applicable (for example, for a Windows asset), indicates your license model, such as System or Desktop. |
|
Description |
Descriptive information entered when the asset was added. |
|
Tags |
The tags associated with the asset. |
Use these buttons on the details toolbar to manage the assets assigned to the selected partition.
Table 146: Profiles: Assets tab toolbar
|
 Add Asset
|
Add an asset to the profile. |
|
 Remove
|
Remove the selected asset. |
|
View Details |
After selecting an asset from the table, click this button to view additional details and configuration options. |
|
 Access Request
|
Allows you to enable or disable access request services for the selected asset. Menu options include Enable Session Request and Disable Session Request. |
|
 SSH Host Key
|
This drop-down contains the following options depending on the status of the SSH Host Key:
-
Retrieve SSH Host Key
-
Discover SSH Host Key
-
Set SSH Host Key
-
Download SSH Host Key |
|
 Test Connection
|
Verify that Safeguard for Privileged Passwords can log in to the asset using the service account credentials that you have provided. |
|
 Syncronize Now
|
Run the directory addition (incremental) synchronization process by asset and account. The sync is queued by asset by provider and runs one directory sync on that asset at a time. You can run multiple syncs in parallel on different assets. This is the faster type of directory sync because deletions are not synced. A Tasks window displays the progress and outcome of the task. You can click  Details to see more information or click  Stop to cancel the task. In addition, this process runs through the discovery, if there are discovery rules and configurations set up.The API (Assets/Synchronize) can be used to run the deletion (full) sync which includes all deletions, additions, and changes. This sync takes longer (perhaps hours), especially the first time it is run based on your directory setup. |
|
 Discover Accounts
|
Run the associated Account Discovery job. For more information, see Account Discovery. |
|
Enable-Disable |
Select one of the following:
Select  Enable to have Safeguard for Privileged Passwords manage a disabled asset. Account Discovery jobs find all accounts that match the discovery rule's criteria regardless of whether it has been marked Enabled or Disabled in the past.
Select  Disable to prevent Safeguard for Privileged Passwords from managing the selected asset. When you disable an asset, Safeguard for Privileged Passwords disables it and removes all associated accounts. If you choose to manage the asset later, Safeguard for Privileged Passwords re-enables all the associated accounts. |
|
Show Disabled |
Display the assets that are not managed and are disabled and have no associated accounts. Asset management can be controlled by selecting an asset and clicking Enable-Disable. |
|
 Hide Disabled
|
Hide the assets that are not managed and are disabled and have no associated accounts. Asset management can be controlled by selecting an asset and clicking Enable-Disable. |
|
 Export
|
Use this button to export the listed data as either a JSON or CSV file. For more information, see Exporting data. |
|
 Refresh
|
Retrieve and display an updated list of assets associated with the selected partition. |
|
 Search
|
To locate a specific asset in this list, enter the character string to be used to search for a match. For more information, see Search box. |
Accounts tab (profiles)
A profile's Accounts tab displays the accounts associated with this profile.
Click Add Account/New Account from the details toolbar to associate an account with the selected profile.
To access Accounts:
- web client: Navigate to Asset Management > Profiles > Password Profiles > (View Details) > Accounts.
Table 147: Profiles: Accounts tab properties
|
Name |
Name of an account associated with the selected asset.
While you can associate an account with only one asset, you can log in to an asset with more than one account. |
|
Domain Name |
The domain name for the account and helps to determine the uniqueness of accounts. |
|
Parent |
The name of the object to which the selected account is a child. |
|
Password Profile |
The name of the password profile. |
|
SSH Key Profile |
The name of the SSH key profile. |
|
Service Account |
A  check in this column indicates that the account is a service account. |
|
Password Request |
A check in this column indicates that password release requests are enabled for the account.
Click  Access Requests from the details toolbar to enable or disable a user's ability to request access to the selected account. |
|
Session Request |
A check in this column indicates that session access requests are enabled for the account.
Click Access Requests from the details toolbar to enable or disable a user's ability to request access to the selected account. |
|
SSH Key Request |
A check in this column indicates that SSH key release requests are enabled for the account.
Click Access Requests from the details toolbar to enable or disable a user's ability to request access to the selected account. |
|
Disabled |
A check in this column indicates that the asset is not managed, is disabled, and has no associated accounts. |
|
Password |
A check in this column indicates a password is set for the account. For more information, see Checking, changing, or setting an account password. |
|
SSH Key |
A check in this column indicates an SSH key is set for the account. For more information, see Checking, changing, or setting an SSH key. |
|
Description |
Descriptive information entered when the account was added. |
|
Tags |
Tags associated with the account. |
Use these buttons on the details toolbar to manage your asset accounts.
Table 148: Profiles: Accounts tab toolbar
|
Add Account |
Add an account to the profile. |
| Remove |
Remove the selected account from the asset. |
|
View Details |
After selecting an account from the table, click this button to view additional details and configuration options. |
 Account Security |
Menu options include:
|
| Access Request |
Select an option to enable or disable access request services for the selected account. Values are derived from whether the platform of the asset indicates it supports any of the following: Password Request, SSH Key Request, Session Request. You can enable or disable Password Request, Session Request, and SSH Key Request, as needed.
Service Accounts are created when the Asset is created and by default are not enabled for session or password access.
Discovered Accounts are controlled by the Account Discovery template that is used in discovering the accounts. They are a property of the rule template of the Account Discovery job. For more information, see Adding an Account Discovery rule. |
|
Enable-Disable |
Select one of the following:
Select Enable to have Safeguard for Privileged Passwords manage a disabled account.
Select Disable to prevent Safeguard for Privileged Passwords from managing the selected account. |
|
Show Disabled |
Display the accounts that are not managed and are disabled. |
|
Hide Disabled |
Hide the accounts that are not managed and are disabled.. |
|
Export |
Use this button to export the listed data as either a JSON or CSV file. For more information, see Exporting data. |
|
Refresh |
Update the list of asset accounts. |
| Search |
To locate a specific asset account or set of accounts in this list, enter the character string to be used to search for a match. For more information, see Search box. |
View Password Profile Components (profiles)
When the Password Profiles tab on the Profiles page is selected, a View Password Profile Components link is available. This link displays information on the currently configured password profile components in use by Safeguard for Privileged Passwords.
To open the View Password Profile Components link on the Profiles page:
- web client: Navigate to Asset Management > Profiles > Password Profiles and click the View Password Profile Components link.
The View Password Profile Components view contains the following tabs:
-
Check Password: This tab provides information on the currently configured check password schedules. You can use the Refresh button to update the listed schedules.
-
Change Password: This tab provides information on the currently configured change password schedules. You can use the Refresh button to update the listed schedules.
-
Account Password Rules: This tab provides information on the currently configured account password rules. You can use the Refresh button to update the listed rules.
-
Password Sync Groups: This tab provides information on the currently configured password sync groups. From this tab the following options are available:
-
Add: Add a new password sync group.
-
Delete: Remove the selected password sync group.
-
View Details: View additional information for the selected password sync group.
-
Enable-Disable: Use these buttons to either enable or disable the password sync group.
-
Change Sync Group Password:
-
Refresh: Update the listed password sync groups.
Managing password profiles
Use the controls and tabbed pages on the Profiles page to perform the following tasks to manage password profiles:
