Safeguard for Privileged Passwords On Demand Hosted

On the desktop client, Asset Administrators can define rules that will dynamically add tags to assets and asset accounts so that they can be easily identified and added to dynamic groups. On the web client, Asset Administrators can create and manage tags.

desktop client: Use the Administrative Tools | Settings | Asset Management | Tags pane to create and manage dynamic tags for assets and asset accounts.
web client: Use Asset Management | Tags to create and manage tags for assets and asset accounts.

In addition, Asset Administrators can manually add static tags to assets and accounts on the General tab of the Assets or Accounts view. For more information, see Manually adding a tag to an asset and Manually adding a tag to an account.

The Tags page provides a centralized view of all the tags defined for assets and asset accounts, regardless of how they were assigned. It displays the following details.

Table 173: Tags: Properties
Property	Description
Name	The name assigned to the tag when it was created.
Partition	The asset partition to which the tag belongs.
Account Rules	Indicates whether there is a rule associated with the selected tag. A check mark in this column indicates that the tag has an account rule.
Asset Rules	Indicates whether there is a rule associated with the selected tag. A check mark in this column indicates that the tag has an asset rule.
Description	Information about the tag.
Assigned Owners	Information on the owner(s).

Use these toolbar buttons to manage tags.

Table 174: Tags: Toolbar
Option	Description
New / New Tag	Add a tag. For more information, see Adding a tag for tagging of assets or asset accounts.
Delete	Remove the selected tag. For more information, see Deleting an asset or asset account tag.
Refresh	Update the list of tags.
Edit	Modify the selected tag. For more information, see Modifying an asset or asset account tag. NOTE: You cannot modify the partition assignment of an existing tag using the Edit operation. Use the Copy operation to clone the tag and assign it to an additional partition. Use the Delete operation to remove the tag from the existing partition.
Copy	Clone the selected tag and assign it to one or more additional partitions. For more information, see Copying an asset or asset account tag to another partition. NOTE: If the tag already exists in the partition, the tag will be replaced with the cloned one.
Occurrences	View a list of assets and asset accounts that are assigned to the selected tag. For more information, see Viewing asset and asset account tag assignments.
Search	Search for a specific tag or set of tags in this list.

Use the New/New Tag button on the Tags page to add a tag for an asset or asset account.

(

desktop client) To add an asset or asset account dynamic tag

Table 175: Asset Account Rules tab: Rule editor controls
Property	Description
AND \| OR	Click AND to group multiple search criteria together, where all criteria must be met in order to be included. Click OR to group multiple search criteria together; where at least one of the criteria must be met in order to be included.
Attribute	In the first query clause box, select the attribute to be searched. Valid attributes include: Allow Password Requests Allow Session Requests Allow SSH key Requests Asset Name Asset Tag Description Directory Container (If you use the operator Equal, one level is found.) Disabled Discovered Group Distinguished Name (Use this selection to specify the search is for the domain to which the group belongs.) Discovered Group Name (Use this selection to not specify the domain in the search. To specify the domain, select Discovered Group Distinguished Name.) Discovery Job Name Distinguished Name Domain Name Name NETBIOS Name Partition Name Specify the platform. Here is how the search works: Platform: This is the broadest search which will return the most results. The value you enter matches if it is found in one or more of the following: DisplayName (Platform Name) such as Windows PlatformType such as MicrosoftAD, Ubuntu, RacfLdap PlatformFamily such as Windows, Linux, AIX Platform.Version (Platform Version) such as Server 2016, 10 For example, typing in Other could return these platforms: Windows Other, Other Other, and Other. Platform Name: For a more granular search, enter the name of the platform, such as Windows. If you enter Windows without entering a Platform Version, there may be a match on Windows Server 2019, Windows Server 2016, and Windows 10. Platform Version: Enter the version of the platform, such as Server 2016. For a precise search, enter both the Platform Name and the Platform Version, For example, if you enter the Platform Name as Windows and the Platform Version as Server 2016, then only Windows Server 2016 will be selected. For more information, see Supported platforms. Service Account SID Tag
Operator	In the middle clause query box, select the operator to be used in the search. The operators available depend upon the data type of the attribute selected. For string attributes, the operators may include: Contains (Default) Does not contain Starts with Ends with Equals Not equal For boolean attributes, the operators may include: Is True Is False
Search string	In the last clause query box, enter the search string or value to be used to find a match.
\|	Click to the left of a search clause to add an additional clause to the search criteria. Click to remove the search clause from the search criteria.
Add Grouping \| Remove	Click the Add Grouping button to add an additional set of conditions to be met. A new grouping is added under the last query clause in a group and appears in a bordered pane showing that it is subordinate to the higher level query conditions. Click the Remove button to remove a grouping from the search criteria.
Preview	Click Preview to run the query in order to review the results of the query before adding the dynamic tag.

Table 176: Asset Rules tab: Rule editor controls
Property	Description
AND \| OR	Click AND to group multiple search criteria together, where all criteria must be met in order to be included. Click OR to group multiple search criteria together, where at least one of the criteria must be met in order to be included.
Attribute	In the first query clause box, select the attribute to be searched. Valid attributes include: Allow Session Requests Description Directory Container (If you use the operator Equal, one level is found.) Disabled Discovered Group Distinguished Name (Use this selection to specify the search is for the domain to which the group belongs.) Discovered Group Name (Use this selection to not specify the domain in the search. To specify the domain, select Discovered Group Distinguished Name.) Discovery Job Name A profile selection: Profiles can be inherited. For example, an account can be assigned to a specific profile (Profile Name) or it can inherit the profile from its parent asset (Effective Profile Name). When inherited, Profile Name will be null. Effective Profile Name will always have a value. Effective Profile Name Profile Name Name (default) Network Address Partition Name Platform Tag
Operator	In the middle clause query box, select the operator to be used in the search. The operators available depend on the data type of the attribute selected. For string attributes, the operators may include: Contains (Default) Does not contain Starts with Ends with Equals Not equal For boolean attributes, the operators may include: Is True Is False
Search string	In the last clause query box, enter the search string or value to be used to find a match.
\|	Click to the left of a search clause to add an additional clause to the search criteria. Click to remove the search clause from the search criteria.
Add Grouping \| Remove	Click the Add Grouping button to add an additional set of conditions to be met. A new grouping is added under the last query clause in a group and appears in a bordered pane showing that it is subordinate to the higher level query conditions. Click the Remove button to remove a grouping from the search criteria.
Preview	Click Preview to run the query in order to review the results of the query before adding the dynamic tag.

Table 177: Assigned Owners tab: Rule editor controls
Property	Description
\|	Click to Add User or User Group. Click to remove a previously added user or group.
Refresh	Update the list of users and groups.

(

web client) To add an asset or asset account tag

Safeguard for Privileged Passwords On Demand Hosted - Administration Guide

Adding a registered connector

Tags

Adding a tag for tagging of assets or asset accounts

Deleting an asset or asset account tag

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Safeguard for Privileged Passwords On Demand Hosted - Administration Guide

Adding a registered connector

Tags

Adding a tag for tagging of assets or asset accounts

Deleting an asset or asset account tag