Is it possible to have a user be able to request sessions and also view the PSM Session report for session requests on specific systems/accounts only?
To configure TPAM to provide users with the ability to view the PSM Session Request for specific systems, please follow the below configuration:
1. Log into the /PAR interface of the Primary TPAM Appliance with an administrator account
2. From the main drop down options select “Management” | “Access Policies”
3. Scroll to the bottom of the window and click the button “Add Policy”
4. When the “Details” tab for the new policy appears, provide a Policy Name (Example: Helpdesk User)
5. If required, also enter in a Policy Description (Example: Policy grants the ability to request sessions and view requested sessions)
6. For the policy “Type”, enable the checkbox by “Session”
7. For the policy “Permissions” enable the checkbox by “REQ” and “REV” (NOTE: These permissions allow the ability to request and review for the Type selected in the policy)
8. Scroll to the bottom of the window and click the button “Save Changes”
9. To assign the new policy to a test user, remain logged into the /PAR interface of the Primary TPAM Appliance with an Administrator account
10. From the main drop down options select “Systems, Accounts, & Collections” | “Systems” | “Manage Systems”
11. Enter a system name into the filter
12. Select the “Listing” tab
13. Select the system, and select the “Permissions” tab
14. Configure the filter tab if required and select the “Results” tab
15. Select the “Assigned Access Policy” field beside the test user or group entity
16. From the “Access Policy Details”, “Access Policy:” drop down menu, select your newly created policy
17. Once selected from the drop down list, click the single green checkmark button to apply the policy
18. Scroll to the bottom of the window and click the button “Save Changes”
19. Have your test user log out of TPAM, and log back in for the new policy to be implemented
20. The user should not have the ability to review the “Reports --> PSM Session Reports --> PSM Session Requests” for the system.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center