Return
-
Title
Can the permissions of an AD account by elevated by TPAM? -
Description
Does TPAM / Privileged Password Manager have the capability to temporarily elevate AD accounts while an account is checked out and then lower AD permissions upon check in? -
Resolution
No. TPAM / PPM does not have the ability to modify the active directory permissions assigned to an account.
When a user requests an account through PPM, we only supply the username and password necessary to authenticate with this account. Any permissions or group memberships that the account requires would need to be granted through AD by an Administrator.