PAM asset groups
An asset group is a collection of assets. An asset group can be added to the scope of an access request policy.
Asset groups are imported into the One Identity Manager database during synchronization. You cannot edit the properties of asset groups. Changes to the object properties of individual asset groups can be re-imported by single object synchronization.
To display the properties of an asset group
-
In the Manager, select the Privileged Account Management > Appliances > <appliance> > Privileged Objects > Asset groups category.
-
Select the asset group in the result list.
-
Select the Change main data task.
For an asset group, you see an overview of the assets and access request policies associated with the asset group.
To obtain an overview of an asset group
-
In the Manager, select the Privileged Account Management > Appliances > <appliance> > Privileged Objects > Asset groups category.
-
Select the asset group in the result list.
-
Select the PAM asset group overview task.
Related topics
PAM asset accounts
An asset account is a unique ID for the access to an asset, for example, a user account, a group or a service account. For asset accounts, passwords can be requested for accessing the assets.
Asset accounts are imported into the One Identity Manager database during synchronization. Changes to the object properties of individual asset accounts can be re-imported by single object synchronization.
To view an overview of an asset account:
-
In the Manager, select the Privileged Account Management > Appliances > <appliance> > Privileged Objects > Asset accounts category.
-
Select the asset account in the result list.
-
Select the PAM asset account overview task.
To display the properties of an asset account:
-
In the Manager, select the Privileged Account Management > Appliances > <appliance> > Privileged Objects > Asset accounts category.
-
Select the asset account in the result list.
-
Select the Change main data task.
For an asset account, you see an overview of the account groups and the access request policies associated with the asset account.
To define a risk index for an asset account
-
In the Manager, select the Privileged Account Management > Appliances > <appliance> > Privileged Objects > Asset accounts category.
-
Select the asset account in the result list.
-
Select the Change main data task.
-
Set a value for the Risk index between 0 and 1.
This input field is only visible if the QER | CalculateRiskIndex configuration parameter is set. For more information, see the One Identity Manager Risk Assessment Administration Guide.
-
Save the changes.
Related topics
PAM directory accounts
Directory accounts are privileged user accounts in a directory, such as Active Directory or LDAP, for which you can request a password.
Directory accounts are imported into the One Identity Manager database during synchronization. Changes to the object properties of individual directory accounts can be re-imported by single object synchronization.
To view an overview of a directory account:
-
In the Manager, select the Privileged Account Management > Appliances > <appliance> > Privileged Objects > Directory accounts category.
-
Select the directory account in the result list.
-
Select the PAM directory account overview task.
To display the properties of a directory account
-
In the Manager, select the Privileged Account Management > Appliances > <appliance> > Privileged Objects > Directory accounts category.
-
Select the directory account in the result list.
-
Select the Change main data task.
For a directory account, you see an overview of the user account in the directory, the PAM user accounts, and the access request policies associated with the directory account.
To define a risk index for a directory account
-
In the Manager, select the Privileged Account Management > Appliances > <appliance> > Privileged Objects > Directory accounts category.
-
Select the directory account in the result list.
-
Select the Change main data task.
-
Set a value for the Risk index between 0 and 1.
This input field is only visible if the QER | CalculateRiskIndex configuration parameter is set. For more information, see the One Identity Manager Risk Assessment Administration Guide.
-
Save the changes.
Related topics
PAM account groups
An account group is a collection of asset account and directory accounts. An account group can be added to the scope of an access request policy.
Account groups are imported into the One Identity Manager database during synchronization. You cannot edit the properties of account groups. Changes to the object properties of individual account groups can be re-imported by single object synchronization.
To display the properties of an account group
-
In the Manager, select the Privileged Account Management > Appliances > <Appliance> > Privileged objects > Account groups category.
-
Select the account group in the result list.
-
Select the Change main data task.
For an account group, you see an overview of the asset accounts, directory accounts, and the access request policies associated with the account group.
To obtain an overview of an account group
-
In the Manager, select the Privileged Account Management > Appliances > <Appliance> > Privileged objects > Account groups category.
-
Select the account group in the result list.
-
Select the PAM account group overview task.
Related topics
