Accounts tab (asset)

An asset's Accounts tab displays the accounts associated with this asset.

Click New Account from the details toolbar to associate an account with the selected asset.

To access Accounts:

  • web client: Navigate to Asset Management > Assets > (View Details) > Accounts.
Table 88: Assets: Accounts tab properties
Property Description

Name

Name of an account associated with the selected asset.

While you can associate an account with only one asset, you can log in to an asset with more than one account.

Domain Name

The domain name for the account and helps to determine the uniqueness of accounts.

Password Profile

The name of the profile that manages the account.

SSH Key Profile

The name of the SSH key profile.

Service Account

A check in this column indicates that the account is a service account.

Password Request

A check in this column indicates that password release requests are enabled for the account.

Click Access Requests from the details toolbar to enable or disable a user's ability to request access to the selected account.

Session Request

A check in this column indicates that session access requests are enabled for the account.

Click Access Requests from the details toolbar to enable or disable a user's ability to request access to the selected account.

SSH Key Request

A check in this column indicates that SSH key release requests are enabled for the account.

Click Access Requests from the details toolbar to enable or disable a user's ability to request access to the selected account.

Disabled

A check in this column indicates that the asset is not managed, is disabled, and has no associated accounts.

Password

A check in this column indicates a password is set for the account. For more information, see Checking, changing, or setting an account password..

TOTP Authenticator

A check in this column indicates a TOTP Authenticator is set for the account. For more information, see Setting a TOTP authenticator.

SSH Key

A check in this column indicates an SSH key is set for the account. For more information, see Checking, changing, or setting an SSH key..

API Keys

A check in this column indicates an API key is set for the account. For more information, see For more information, see Checking, changing, or setting an SSH key..

JIT Privilege Group Membership

The name of one or more groups that have been configured to be assigned to the account at the time of checkout, then correspondingly removed from the account at the time of check-in. The assigned group membership acts as just-in-time (JIT) privilege elevation and demotion for the account.

Description

Descriptive information entered when the account was added.

Tags

The tags associated with the account

File request

A check in this column indicates that file release requests are enabled for the account.

File

A check in this column indicates a file is set for the account.

Use these buttons on the details toolbar to manage your asset accounts.

Table 89: Assets: Accounts tab toolbar
Option Description
New Account

Add accounts to the selected asset. For more information, see Adding an account to an asset..

Delete

Remove the selected account from the asset.

View Details

Edit the selected account.

Account Secrets

Menu options include:

  • Check Password
  • Change Password
  • Check SSH Key
  • Change SSH Key
  • Discover SSH Keys
  • Run the SSH Key Discovery job associated with the account. For more information, see SSH Key Discovery..
  • Access Requests

    Select an option to enable or disable access request services for the selected account. Values are derived from whether the platform of the asset indicates it supports any of the following: Password Request, SSH Key Request, Session Request. You can enable or disable Password Request, Session Request, and SSH Key Request, as needed.

    Service Accounts are created when the Asset is created and by default are not enabled for session or password access.

    Discovered Accounts are controlled by the Account Discovery template that is used in discovering the accounts. They are a property of the rule template of the Account Discovery job. For more information, see Adding an Account Discovery rule..

    Enable-Disable

    Select Enable to have SPP manage a disabled asset. Account Discovery jobs find all accounts that match the discovery rule's criteria regardless of whether it has been marked Enabled or Disabled in the past.

    Select Disable to prevent SPP from managing the selected asset. When you disable an asset, SPP disables it and removes all associated accounts. If you choose to manage the asset later, SPP re-enables all the associated accounts.

    Export

    Use this button to export the listed data as either a JSON or CSV file. For more information, see Exporting data.

    Refresh

    Update the list of asset accounts.

    Search

    To locate a specific asset account or set of accounts in this list, enter the character string to be used to search for a match. For more information, see Search box..