Chatta subito con l'assistenza
Chat con il supporto

One Identity Safeguard for Privileged Passwords 8.0 LTS - Administration Guide

Introduction System requirements Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Home page Privileged access requests Appliance Management
Appliance Backup and Retention Certificates Cluster Global Services External Integration Real-Time Reports Safeguard Access Appliance Management Settings
Asset Management
Account Automation Accounts Assets Partitions Discovery Profiles Tags Registered Connectors Custom platforms Importing objects
Security Policy Management
Access Request Activity Account Groups Application to Application Cloud Assistant Asset Groups Entitlements Linked Accounts User Groups Security Policy Settings
User Management Reports Vaults Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP and SPS join guidance Appendix C: Regular Expressions

Adding a password sync group

The Asset Administrator or a partition's delegated administrator defines the password sync group. An account can belong to only one password sync group. To assign sync groups and related accounts when adding the profile to a partition, see Creating a password profile. 

To create a password sync group

  1. On the New Password Sync Group dialog, enter a unique Name of up to 100 characters.
  2. Enter a Description of up to 255 characters.
  3. Once the Password Sync group has been saved, click Edit.
  4. Open the Accounts tab.
  5. Click Add and select one or more Accounts to be synchronized.
  6. The Accounts list displays with information about the account. Click any of the columns to sort the accounts.
  7. Click Select Accounts. The following values display:
    • Status: Displayed as if the password is not the same as the sync group, if the password is the same, or if the account is ignored and possibly should not be in the sync group.
    • Priority: The default is priority 0 (the highest). To change the priority, double-click the Priority value and enter the new priority. For more information, see Password sync group account priority..
    • System Name: Name of the system (asset) assigned that is associated with the account.
    • Account Name: Name of the account.
    • Domain Name: Name of the domain.
    • Last Sync Time: The date and time of the last sync.
  8. Click OK.

Setting a default password profile

When you create a new partition, Safeguard for Privileged Passwords creates a corresponding default profile with default schedules and rules.

To set another password profile as the default

  1. Navigate to Asset Management > Profiles.

  2. In Password Profiles, select a profile that is not the current default profile for a partition.

  3. Click  Set as Default from the details toolbar.

Deleting a password profile

It is the responsibility of the Asset Administrator to manage password profiles.

To delete a password profile

  1. Navigate to Asset Management > Profiles > Password Profiles.
  2. Select the profile to be deleted.
  3. Click Delete.
  4. Confirm your request.

SSH Key Profiles (profiles)

Within the web client, the SSH Key Profiles tab on the Profiles page displays information on the currently configured SSH key profiles in use by Safeguard for Privileged Passwords.

To access the SSH Key Profiles tab on the Profiles page:

  • web client: Navigate to Asset Management > Profiles and open the SSH Key Profiles tab. If needed, you can use the partition drop-down to select the parent partition of the profile (by default all profiles are displayed). Select a profile, then click to display additional information and options.

Selecting one of the profiles displays the following information:

Toolbar

Use these toolbar buttons to manage profiles:

  • New Profile: Add profiles to Safeguard for Privileged Passwords.
  • Delete: Remove the selected profile.
  • View Details: Select a profile then click this button to open additional information and options for the profile.
  • Set as Default: Select a profile then click this button to set it as the default profile.
  • Export: Use this button to export the listed data as either a JSON or CSV file. For more information, see Exporting data.
  • Refresh: Update the list of profiles.

When the SSH Key Profiles tab on the Profiles page is selected, a View SSH Key Profile Components link is available. For more information, see View SSH Key Profile Components (profiles).

Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione