Tchater maintenant avec le support
Tchattez avec un ingénieur du support

One Identity Safeguard for Privileged Passwords 8.0 LTS - Administration Guide

Introduction System requirements Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Home page Privileged access requests Appliance Management
Appliance Backup and Retention Certificates Cluster Global Services External Integration Real-Time Reports Safeguard Access Appliance Management Settings
Asset Management
Account Automation Accounts Assets Partitions Discovery Profiles Tags Registered Connectors Custom platforms Importing objects
Security Policy Management
Access Request Activity Account Groups Application to Application Cloud Assistant Asset Groups Entitlements Linked Accounts User Groups Security Policy Settings
User Management Reports Vaults Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP and SPS join guidance Appendix C: Regular Expressions

Accounts tab (profiles)

A profile's Accounts tab displays the accounts associated with this profile.

Click Add Account/New Account from the details toolbar to associate an account with the selected profile.

To access Accounts:

  • web client: Navigate to Asset Management > Profiles > Password Profiles > (View Details) > Accounts.
Table 152: Profiles: Accounts tab properties
Property Description

Name

Name of an account associated with the selected asset.

While you can associate an account with only one asset, you can log in to an asset with more than one account.

Domain Name

The domain name for the account and helps to determine the uniqueness of accounts.

Parent

The name of the object to which the selected account is a child.

Password Profile

The name of the password profile.

SSH Key Profile

The name of the SSH key profile.

Service Account

A check in this column indicates that the account is a service account.

Password Request

A check in this column indicates that password release requests are enabled for the account.

Click Access Requests from the details toolbar to enable or disable a user's ability to request access to the selected account.

Session Request

A check in this column indicates that session access requests are enabled for the account.

Click Access Requests from the details toolbar to enable or disable a user's ability to request access to the selected account.

SSH Key Request

A check in this column indicates that SSH key release requests are enabled for the account.

Click Access Requests from the details toolbar to enable or disable a user's ability to request access to the selected account.

Disabled

A check in this column indicates that the asset is not managed, is disabled, and has no associated accounts.

Password

A check in this column indicates a password is set for the account. For more information, see Checking, changing, or setting an account password..

TOTP Authenticator

A check in this column indicates a TOTP Authenticator is set for the account. For more information, see Setting a TOTP authenticator.

SSH Key

A check in this column indicates an SSH key is set for the account. For more information, see Checking, changing, or setting an SSH key..

API Keys

A check in this column indicates an API key is set for the account. For more information, see Checking, changing, or setting an SSH key..

Description

Descriptive information entered when the account was added.

Tags

Tags associated with the account.

Use these buttons on the details toolbar to manage your asset accounts.

Table 153: Profiles: Accounts tab toolbar
Option Description

Add Account

Add an account to the profile.

Remove

Remove the selected account from the asset.

View Details

After selecting an account from the table, click this button to view additional details and configuration options.

Account Secrets

Menu options include:

  • Check Password
  • Change Password
  • Check SSH Key
  • Change SSH Key
Access Request

Select an option to enable or disable access request services for the selected account. Values are derived from whether the platform of the asset indicates it supports any of the following: Password Request, SSH Key Request, Session Request. You can enable or disable Password Request, Session Request, and SSH Key Request, as needed.

Service Accounts are created when the Asset is created and by default are not enabled for session or password access.

Discovered Accounts are controlled by the Account Discovery template that is used in discovering the accounts. They are a property of the rule template of the Account Discovery job. For more information, see Adding an Account Discovery rule..

Enable-Disable

Select one of the following:

Select Enable to have Safeguard for Privileged Passwords manage a disabled account.

Select Disable to prevent Safeguard for Privileged Passwords from managing the selected account.

Show Disabled

Display the accounts that are not managed and are disabled.

Hide Disabled

Hide the accounts that are not managed and are disabled..

Export

Use this button to export the listed data as either a JSON or CSV file. For more information, see Exporting data.

Refresh

Update the list of asset accounts.

Search

To locate a specific asset account or set of accounts in this list, enter the character string to be used to search for a match. For more information, see Search box..

View Password Profile Components (profiles)

When the Password Profiles tab on the Profiles page is selected, a View Password Profile Components link is available. This link displays information on the currently configured password profile components in use by Safeguard for Privileged Passwords.

To open the View Password Profile Components link on the Profiles page:

  • web client: Navigate to Asset Management > Profiles > Password Profiles and click the View Password Profile Components link.

The View Password Profile Components view contains the following tabs:

  • Check Password: This tab provides information on the currently configured check password schedules. You can use the Refresh button to update the listed schedules.

  • Change Password: This tab provides information on the currently configured change password schedules. You can use the Refresh button to update the listed schedules.

  • Account Password Rules: This tab provides information on the currently configured account password rules. You can use the Refresh button to update the listed rules.

  • Password Sync Groups: This tab provides information on the currently configured password sync groups. From this tab the following options are available:

    • Add: Add a new password sync group.

    • Delete: Remove the selected password sync group.

    • View Details: View additional information for the selected password sync group.

    • Enable-Disable: Use these buttons to either enable or disable the password sync group.

    • Change Sync Group Password:

    • Refresh: Update the listed password sync groups.

Managing password profiles

Use the controls and tabbed pages on the Profiles page to perform the following tasks to manage password profiles:

Adding a password profile

It is the responsibility of the Asset Administrator to add partitions to Safeguard for Privileged Passwords.

To add a password profile

  1. Navigate to Asset Management > Profiles > Password Profiles.
  2. Click  New Profile from the toolbar.
  3. In the General dialog, enter the following information:

    1. Name: Enter a unique name for the profile. Limit: 50 characters.

    2. Description: (Optional) Enter information about this profile. Limit: 255 characters.

  4. On the Check Password tab, select a previously defined check password setting from the drop-down menu or click Add to add a new check password setting. These are the rules used to verify account passwords. For more information, see Adding check password settings..

  5. On the Change Password tab, select a previously defined change password setting from the drop-down menu or click Add to add a new change password setting. These are the rules used to reset account passwords. For more information, see Adding change password settings..

  6. On the Account Password Rule tab, select a previously defined account password rule or click Add to add a new account password rule. An account password rule is a complexity rule that governs the construction of the new password created by Safeguard for Privileged Passwords during an automatic password change. For more information, see Adding an account password rule..

  7. Click OK to save the password profile.

  8. When creating a new profile, the Password Sync Groups tab is not available. This tab is displayed while editing a profile. You can use the Password Sync Groups tab to add or update a password sync group governed by the profile change schedule. For more information, see Password sync groups..

Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation