サポートと今すぐチャット
サポートとのチャット

Safeguard for Privileged Passwords On Demand Hosted - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Getting started with the desktop client Using the desktop client Activity Center Search box Privileged access requests Toolbox Accounts Account Groups Assets
General/Properties tab (asset) Accounts tab (asset) Account Dependencies tab (asset) Owners tab (asset) Access Request Policies tab (asset) Asset Groups tab (asset) Discovered SSH Keys (asset) Discovered Services tab (asset) History tab (asset) Managing assets
Asset Groups Discovery Entitlements Linked Accounts Partitions Profiles Settings
Access Request settings Appliance settings Asset Management settings Tags Backup and Retention settings Certificates settings Cluster settings Enable or Disable Services settings External Integration settings Password Management settings Real-Time Reports Safeguard Access settings SSH Key Management settings Security Policy Settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions About us

Favorites (web client)

On your Home or My Requests page, you will see Favorites. You can quickly make requests by creating a favorite of requests you make often, then just click the favorite.

You must be authorized to create requests for the assets and accounts you choose to include in a favorite. To change the look of the favorite tiles, click for grid view or for list view.

If Show Account Availability is enabled you can identify if a privileged account is available or not. Accounts display a warning badge if in use by a request. An account's status is updated immediately after being changed in order to avoid overlapping account requests from multiple users. Hover over the badge to display <X> of <X> accounts in use. Showing account availability requires additional API queries that may impact performance. This toggle is set by the user not an administrator. There is no global toggle.

NOTE: When the policy governing the request has enabled Allow simultaneous access for multiple user access, the request may still be available even though Show Account Request Availability indicates it is in use.

Add a favorite

  1. Click New Favorite.
  2. On the New Favorite page, select the assets to access. Use the following approaches to quickly find the assets you want:
    • Click Search to search the Asset, Network Address, or Platform. For more information, see Search box.
    • Once you've selected assets, the number of Assets selected displays in the lower left.
    • In the lower right, select the number of Items per page that display. Click the arrows to move through the pages.
  3. Click Next.
  4. On Favorite Details, enter a name for the favorite.
  5. Select the color that will be used when displaying the favorite on the Home and My Requests pages.

  6. Click Save Favorite.

    This access request is then added to your Favorites. Once a favorite has been created, you can use and make changes to your favorites by selecting it from Favorites on the Home page or the My Requests page.

    NOTE: Favorites have unique links, so you can bookmark/copy the link and later access it via that link rather than navigating through the web client

My Settings (web client)

From My Settings, you can set a variety of controls for using the web client. These include page displays, update your information, including email notifications, check the version, or download the Safeguard for Privileged Passwords desktop Windows client. The settings you see are based on your role and permissions.

Go to My Settings

In the upper right corner, next to your user name, click then My Settings to proceed.

On the My Settings dialog, the tabs available are based on your role and permissions.

Using the General tab

  • Language drop-down: Use this drop-down to change the site language. By default, this is set to Browser Language (Auto Detect).
  • About Safeguard: The Appliance Version displays.
  • Download Windows Client: Click to download the Windows desktop client.

Using the My Account tab

  • Contact Information: Click Edit to change Email, Work Phone, or Mobile Phone. Click Save to save your changes or click Cancel to revert to the previous setting.
  • Location: Select your time zone in the drop-down box. Changing your time zone may be prohibited based on your organization's security procedures. If available, choose to:
    • Display times in local computer time: This is the default. It is the time zone set on your local computer.
    • Display times in my configured time zone: This is the time zone that is set on this page.
  • Manage Email Notifications: The Manage Email Notifications dialog displays the type of events for which you are receiving email notifications. You can define the types of events for which you want to receive notifications. By default, all events are selected. If the event is Built In to SPP, a displays. When there are multiple events, an Events link appears that leads to the Subscriptions dialog listing the Name, Description, and Category of the event.
    • Clear the check box for any events for which you do not want to receive an email notification.
    • To set all check boxes, select or clear the check box at the top of the list to the left of the header.

    NOTE: When there are no delegated owners assigned to a partition, email notifications related to partitions are sent to the Asset Administrator. However, when a delegated owner is specified to manage the assets and accounts in a partition, email notifications related to partitions are sent to the delegated owner, not to the Asset Administrator.

  • Manage FIDO2 Keys (Available if you are required to perform FIDO2 two-factor authentication.): If the FIDO2 feature is enabled, at least one FIDO2 key must be registered. When a key is added, the placeholder name is Unnamed Key. You can enter a meaningful name or later edit the name. It is recommended that all users have more than one key registered in case a key is lost or damaged. For existing keys, you will see the name and date each existing key was registered and last used.
    • To change a name, enter the new name, then click Save.
    • To remove a key, click Remove by the key. One key must remain registered. If a physical security key is lost, always delete the associated key from Safeguard for Privileged Passwords.
    • To add a key, click Register New FIDO2 Key.
      1. You will be asked to insert or connect to the new key.

      2. You will be prompted to reenter your primary credentials for verification.

      3. Tap or activate your new FIDO2 key that is being registered.

      4. You may then go back to the Manage FIDO2 Key page and give your newly registered key a name, then click Save.

      For more information, see Requiring user to log in using secondary authentication.

  • Change Password: The password requirements are listed. Enter your Current Password and the New Password as directed. (Click Display or Hide to view or hide the password as it is entered.) Click Save.

Change password (web client)

You can change your password.

To change the password

  1. In the upper right corner, next to your user name, click .
  2. Click My Settings.
  3. Open the My Account tab.
  4. Click Change Password. The password requirements are listed.
  5. Enter your Current Password and the New Password as directed. (Click Display or Hide to view or hide the password as it is entered.)
  6. Click Save to save your new password.

FIDO2 keys (web client)

If the FIDO2 feature is enabled, at least one FIDO2 key must be registered. When a key is added, the placeholder name is Unnamed Key. You can enter a meaningful name or later edit the name. It is recommended that all users have more than one key registered in case a key is lost or damaged.

  1. In the upper right corner, next to your user name, click .
  2. Click My Settings.
  3. Open the My Account tab.
  4. Click Manage FIDO2 Keys. For existing keys, you will see the name and date each existing key was registered and last used.
  5. Perform an action:
    • To change a name, enter the new name, then click Save.
    • To remove a key, click Remove by the key. One key must remain registered. If a physical security key is lost, always delete the associated key from Safeguard for Privileged Passwords.
    • To add a key, click Register New FIDO2 Key.
      1. You will be asked to insert or connect to the new key.

      2. You will be prompted to reenter your primary credentials for verification.

      3. Tap or activate your new FIDO2 key that is being registered.

      4. You may then go back to the Manage FIDO2 Key page and give your newly registered key a name, then click Save.

For more information, see Requiring secondary authentication log in.

関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択