サポートと今すぐチャット
サポートとのチャット

Identity Manager 9.1.3 - Administration Guide for Privileged Account Governance

About this guide Managing a Privileged Account Management system in One Identity Manager Synchronizing a Privileged Account Management system
Setting up the initial synchronization of a One Identity Safeguard Customizing the synchronization configuration for One Identity Safeguard Running synchronization Tasks following synchronization Troubleshooting Ignoring data error in synchronization Pausing handling of target system specific processes (Offline mode)
Managing PAM user accounts and employees Managing assignments of PAM user groups Login information for PAM user accounts Mapping of PAM objects in One Identity Manager PAM access requests Handling of PAM objects in the Web Portal Basic data for managing a Privileged Account Management system Configuration parameters for managing a Privileged Account Management system Default project template for One Identity Safeguard Editing One Identity Safeguard system objects One Identity Safeguard connector settings Known issues about connecting One Identity Safeguard appliances

PAM directory accounts

Directory accounts are privileged user accounts in a directory, such as Active Directory or LDAP, for which you can request a password.

Directory accounts are imported into the One Identity Manager database during synchronization. Changes to the object properties of individual directory accounts can be re-imported by single object synchronization.

To view an overview of a directory account:

  1. In the Manager, select the Privileged Account Management > Appliances > <appliance> > Privileged Objects > Directory accounts category.

  2. Select the directory account in the result list.

  3. Select the PAM directory account overview task.

To display the properties of a directory account

  1. In the Manager, select the Privileged Account Management > Appliances > <appliance> > Privileged Objects > Directory accounts category.

  2. Select the directory account in the result list.

  3. Select the Change main data task.

For a directory account, you see an overview of the user account in the directory, the PAM user accounts, and the access request policies associated with the directory account.

To define a risk index for a directory account

  1. In the Manager, select the Privileged Account Management > Appliances > <appliance> > Privileged Objects > Directory accounts category.

  2. Select the directory account in the result list.

  3. Select the Change main data task.

  4. Set a value for the Risk index between 0 and 1.

    This input field is only visible if the QER | CalculateRiskIndex configuration parameter is set. For more information, see the One Identity Manager Risk Assessment Administration Guide.

  5. Save the changes.

Related topics

PAM account groups

An account group is a collection of asset account and directory accounts. An account group can be added to the scope of an access request policy.

Account groups are imported into the One Identity Manager database during synchronization. You cannot edit the properties of account groups. Changes to the object properties of individual account groups can be re-imported by single object synchronization.

To display the properties of an account group

  1. In the Manager, select the Privileged Account Management > Appliances > <Appliance> > Privileged objects > Account groups category.

  2. Select the account group in the result list.

  3. Select the Change main data task.

For an account group, you see an overview of the asset accounts, directory accounts, and the access request policies associated with the account group.

To obtain an overview of an account group

  1. In the Manager, select the Privileged Account Management > Appliances > <Appliance> > Privileged objects > Account groups category.

  2. Select the account group in the result list.

  3. Select the PAM account group overview task.

Related topics

PAM directories

Directories represent external target system, for example Active Directory or LDAP. If the Active Directory environment or the LDAP environment is imported into One Identity Manager, you can create directory users in One Identity Manager. Directory users and directory groups are linked to the relevant Active Directory objects and LDAP objects.

Directories are imported into the One Identity Manager database during synchronization. You cannot edit the properties of directories. Changes to the object properties of individual directories can be re-imported by single object synchronization.

To display the properties of a directory

  1. In the Manager, select the Privileged Account Management > Appliances > <appliance> > Directories category.

  2. Select the directory in the result list.

  3. Select the Change main data task.

For a directory, you see an overview of the user accounts, user groups, and the directory accounts associated with the directory.

To view an overview of a directory

  1. In the Manager, select the Privileged Account Management > Appliances > <appliance> > Directories category.

  2. Select the directory in the result list.

  3. Select the PAM directory overview task.

Related topics

PAM entitlements

An entitlement is a set of access request policies that ensures only authorized users can access the system. An entitlement usually groups together a set of permissions that are required to fulfill a specific task.

An entitlement defines which users are authorized to request passwords for accounts or sessions for assets as part of the defined access request policies.

Entitlements are imported into the One Identity Manager database during synchronization. You cannot edit the properties of entitlements. Changes to the object properties of individual entitlements can be re-imported by single object synchronization.

To display the properties of an entitlement

  1. In the Manager, select the Privileged Account Management > Appliances > <appliance> > Entitlements category.

  2. Select the entitlement in the result list.

  3. Select the Change main data task.

For an entitlement, you see an overview of the user accounts, user groups, and the access request policies associated with the entitlement.

To view an overview of an entitlement

  1. In the Manager, select the Privileged Account Management > Appliances > <appliance> > Entitlements category.

  2. Select the entitlement in the result list.

  3. Select the PAM entitlement overview task.

Related topics
関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択