지금 지원 담당자와 채팅
지원 담당자와 채팅

One Identity Safeguard for Privileged Passwords 6.7.4 - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Getting started with the desktop client Using the desktop client Search box Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Discovery Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificates settings Cluster settings Enable or Disable Services settings External Integration settings Messaging settings (desktop client) Password Management settings Safeguard Access settings SSH Key Management settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions SPP Glossary About us

SSH Key Profiles tab (partitions)

Each managed account can have a single SSH identity key. An SSH key can be requested and configured for A2A (account level scoping) and used for sessions.

The SSH Key Profiles tab lists the SSH key profiles associated with the selected partition. For more information, see About profiles.

Navigate to Administrative Tools | Partitions | SSH Key Profiles tab.

Click  Create SSH Key Profile from the details toolbar to add an SSH key profile to the selected partition. 

Table 114: Partitions: SSH Key Profiles tab properties
Property Description
Name

SSH key profile name.

Default Default displays in this column to identify the default profile. For more information, see Setting a default profile.

Check SSH Key

The Check SSH Key setting used to verify SSH keys. For more information, see Check SSH Key settings.

Change SSH Key

The Change SSH Key setting used to verify SSH keys. For more information, see Change SSH Key settings.

Discover SSH Key

The SSH Key Discovery job used to discover the SSH keys. For more information, see Discover SSH Key settings.

Description Information about the selected SSH key profile.

Use these buttons on the details toolbar to manage your partitions profiles.

Table 115: Partitions: SSH Key Profiles tab toolbar
Option Description

Create SSH Key Profile

Add an SSH key profile to the selected partition. For more information, see Creating an SSH key profile.

Deleted Selected

Remove the selected SSH key profile.

If you delete an SSH key profile, Safeguard for Privileged Passwords reassigns all assets and accounts to the default profile.

Refresh
Update the list of SSH key profiles.

Edit SSH Key Profile

Modify the selected SSH key profile. For more information, see Modifying an SSH key profile.

Set as Default

Set the selected profile as the default profile. For more information, see Setting a default profile.

Details
View additional details about the selected SSH key profile, including the associated assets, accounts, and SSH key sync groups. You can select the Assets, Accounts, or SSH Key Synch Groups tab then click Add to make additions to the SSH key profile.

Search

Locate a specific SSH key profile or set of profiles in this list by entering the character string to be used to search for a match. For more information, see Search box.

History tab (partitions)

The History tab allows you to view or export the details of each operation that has affected the selected partition.

The top of the History tab contains the following information:

  • Items: Total number of entries in the history log.
  • Refresh: Update the list displayed.
  • Export: Export the data to a .csv file.

  • Search: For more information, see Search box.

  • Time Frame: By default, the history details are displayed for the last 24 hours. Click one of the time intervals at the top of the grid to display history details for a different time frame. If the display does not refresh after selecting a different time interval, click Refresh.
Table 116: Partitions: History tab properties
Property Description
Date/Time The date and time of the event
User The display name of the user that triggered the event
Source IP The network DNS name or IP address of the managed system that triggered the event
Object Name The name of the selected partition.
Event

The type of operation made to the selected partition:

  • Create
  • Delete
  • Update
  • Add Membership
  • Remove Membership

NOTE:A membership operation indicates a "relationship" change with a related or parent object such as a delegated administrator was added or removed from the selected partition.

Related Object The name of the related object.
Related Object Type The type of the related object.
Parent The name of the object to which the selected partition is a child.
Parent Object Type The parent object type.

For some types of events, you can select an event to display this additional information (for example, create and update events).

Table 117: Additional History tab properties
Property Description
Property The property that was updated
Old Value The value of the property before it was updated
New Value The new value of the property

Managing partitions

Use the controls and tabbed pages on the Partitions page to perform the following tasks to manage partitions:

Adding a partition

It is the responsibility of the Asset Administrator to add partitions to Safeguard for Privileged Passwords. When you create a new partition, Safeguard for Privileged Passwords creates a corresponding default profile with default schedules and rules. For more information, see Setting a default profile.

To add a partition

  1. Navigate to Administrative Tools | Partitions.
  2. Click  Add Partition from the toolbar.
  3. In the Partition dialog, enter the following information:

    1. Name: Enter a unique name for the partition. Limit: 50 characters

    2. Description: (Optional) Enter information about this partition. Limit: 255 characters

    3. Delegated Owner: (Optional) Browse to select one or more users to manage the assets and accounts in this partition.

      You can use the Clear icon to remove an individual delegated owner from this list or right-click and select Remove All to clear all of the delegated owners from the list.

      By default, an Asset Administrator can manage all partitions; however, you can delegate partition management to a user with no administrator permissions.

When you create a new partition, Safeguard for Privileged Passwords creates a corresponding default profile with default schedules and rules. You can:

Related Topics

Adding assets to a partition

Assigning an asset to a partition

Removing assets from a partition

Modifying a partition

관련 문서

The document was helpful.

평가 결과 선택

I easily found the information I needed.

평가 결과 선택