It is the responsibility of the Asset Administrator to add assets and accounts to SPP. While an asset can have multiple accounts, you can only associate an account with one asset.

The new account displays on the Accounts list.

NOTE: SPP allows you to set up account discovery jobs that run automatically. For more information, see Account Discovery job workflow.

To add an account

  1. Navigate to Asset Management > Accounts.
  2. Click  New Account from the toolbar.

  3. In the Select the asset for the new account dialog, select an asset to associate with this account then click Select Asset.

  4. In the New Account dialog, enter the following information:

    • On the General tab:

      • Name:

        • Local account: Enter the login user name for this account. Limit: 100 characters.
        • Directory Account: Browse to find the account.

      • Description: (Optional) Enter information about this managed account. Limit: 255 characters.

    • On the Management tab:

      • Enable Password Request: This check box is selected by default, indicating that password release requests are enabled for this account. Clear this option to prevent someone from requesting the password for this account. By default, a user can request the password for any account in the scope of the entitlements in which they are an authorized user.

        IMPORTANT: (Azure AD only) Once you save an Azure AD account in SPP you can no longer change the Application Account status.

      • Enable Session Request: This check box is selected by default, indicating that session access requests are enabled for this account. Clear this option to prevent someone from requesting session access using this account. By default, a user can make an access request for any account in the scope of the entitlements in which they are an authorized user.

      • Enable SSH Key Request: This check box is selected by default, indicating that SSH key release requests are enabled for this account. Clear this option to prevent someone from requesting the SSH key for this account. By default, a user can request the SSH key for any account in the scope of the entitlements in which they are an authorized user.

      • Enable API Key Request: This check box is selected by default, indicating that API key release requests are enabled for this account. Clear this option to prevent someone from requesting the API key for this account. By default, a user can request the API key for any account in the scope of the entitlements in which they are an authorized user.

      • (Azure AD only) Application Account: Within Azure AD, only application accounts can use API keys. In order to select the Enable API Key Request check box, this option must be selected for Azure AD accounts which in turn will automatically disallow the use of the Enable Password Request option.

        IMPORTANT: Once you save an Azure AD account in SPP you can no longer change the Application Account status.

      • Password Profile and SSH Key Profile: Browse to select and assign a profile to govern this account.

        By default an account inherits the profile of its associated asset, but you can assign it to a different profile for this partition. For more information, see Assigning assets or accounts to a password profile and SSH key profile.

      • Available for use across all partitions (Only available for some types of directory accounts): When selected, any partition can use this account and the password is given to other administrators. For example, this account can be used as a dependent account or a service account for other assets. Potentially, you may have assets that are running services as the account, and you can update those assets when the service account changes. If not selected, partition owners and other partitions will not know the account exists. Although archive servers are not bound by partitions, this option must be selected for the directory account for the archive server to be configured with the directory account.

  5. Click OK.