Displaying the PAM entitlements overview
For an entitlement, you see an overview of the user accounts, user groups, and the access request policies associated with the entitlement.
To view an overview of an entitlement
-
In the Manager, select the Privileged Account Management > Appliances > <appliance> > Entitlements category.
-
Select the entitlement in the result list.
-
Select the PAM entitlement overview task.
Displaying the main data of PAM entitlements
You cannot edit the properties of entitlements in One Identity Manager.
To display the properties of an entitlement
-
In the Manager, select the Privileged Account Management > Appliances > <appliance> > Entitlements category.
-
Select the entitlement in the result list.
-
Select the Change main data task.
PAM access request policies
An access request policy defines:
-
The scope (meaning, which assets, asset groups, asset accounts, directory accounts, or account groups).
-
The access type (password, SSH, SSH key, remote desktop, remote desktop application, Telnet)
-
The rules for requesting passwords, for example, the duration or how many approvals are required.
Access request policies are imported into the One Identity Manager database during synchronization. Changes to the object properties of individual access request policies can be re-imported by single object synchronization.
Related topics
Displaying the PAM access request policies overview
For an access request policy, will see an overview of the scope of the access request policy and the entitlements associated with the access request policy.
To obtain an overview of an access request policy
-
In the Manager, select the Privileged Account Management > Appliances > <Appliance> > Entitlements > <Entitlement> category.
-
Select the access request policy in the result list.
-
Select the PAM access request policy overview task.