Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 7.0.3 LTS - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Home Privileged access requests Appliance Management
Appliance Backup and Retention Certificates Cluster Enable or Disable Services External Integration Real-Time Reports Safeguard Access Appliance Management Settings
Asset Management
Account Automation Accounts Assets Partitions Discovery Profiles Tags Registered Connectors Custom platforms
Security Policy Management
Access Request Activity Account Groups Application to Application Cloud Assistant Asset Groups Entitlements Linked Accounts User Groups Security Policy Settings
User Management Reports Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP and SPS join guidance Appendix C: Regular Expressions About us

Viewing asset and asset account tag assignments

Use the Occurrences button on the Tags pane on the Asset Management page to view a list of all the assets and asset accounts assigned to a tag.

To view asset and asset account tag assignments

  1. Navigate to Asset Management > Tags.
  2. Select a tag from the list.

  3. Click the Occurrences toolbar button.

    The Occurrences dialog displays, which contains a list of all the assets and accounts assigned to the selected dynamic tag:

    • Name: Name of the asset or account.
    • Domain Name: Name of the domain.
    • Asset: The name of the asset.
    • Dynamic: Indicates whether or not the tag is dynamically assigned.
    • Type: Whether the occurrence identifies an Asset or Account associated with the named Asset.
  4. Use the Search box to locate a specific tag or set of tags in this list. Enter the character string to be used to search for a match.
  5. Click to close the dialog and return to the Tags pane.

Registered Connectors

The Asset Administrator is responsible for adding and managing registered connectors.

Navigate to:

  • web client: Asset Management > Connect and Platforms > Registered Connectors.

After joining Safeguard for Privileged Passwords with One Identity Starling (for more information, see Starling), the Registered Connectors pane displays the following.

Table 171: Registered Connectors: Properties
Property Description
Display

This column shows the display name entered for the registered connector.

Platform Name

This column shows the platform name.

Visible To Partitions

This column shows the partitions that the connector is visible for. When a connector is visible to all partitions then the column will show All Partitions.

Use the following toolbar buttons to manage the registered connector settings.

Table 172: Registered Connectors: Toolbar
Option Description
Add

Add a registered connector. For more information, see Adding a registered connector.

Delete

Remove the selected registered connector.

Edit

Edit the selected registered connector.

Refresh

Update the list of registered connectors.

View

View the valid operations for the registered connector.

Related Topics

Adding a registered connector

Adding a registered connector

It is the responsibility of the Asset Administrator to configure registered connectors.

To add a registered connector

IMPORTANT: Before adding a registered connector, read the Starling Connect documentation for instructions on configuring the connector within Starling Connect for use with Safeguard for Privileged Passwords. The connectors currently available for use with Safeguard for Privileged Passwords are listed in the Starling Connect documentation.

  1. Navigate to:

    • web client: Asset Management > Connect and Platforms > Registered Connectors.

  2. Click  Add.
  3. These fields display:
    1. Registered Connectors: Select the connector (already configured in Starling Connect) to register with Safeguard for Privileged Passwords.
    2. Starling Connector Version: Select the version for the Starling connector.
    3. Display: Enter a display name for the connector.
    4. Visible To All Partitions: Select this check box to make the registered connector visible to all partitions.
    5. Visible To Partitions: Available when Visible To All Partitions is not selected, use this section to define which partitions this registered connector will be visible to:
      • (Add): Use this button to add a new partition.
      • (Remove): Use this button to remove a previously selected partition.

  4. To add the registered connector, click OK.

    The connector will now be registered as a platform and be available as a platform type in the definition of an asset.

IMPORTANT: When using a registered connector with Safeguard for Privileged Passwords, there may be additional considerations involved when configuring certain functionalities. For example, Azure AD uses throttling to limit the number of password changes that can occur within a set period of time. This can mean errors are reported within Safeguard for Privileged Passwords when a large number of accounts associated with a registered Azure AD connector are all scheduled to automatically update their passwords due to their password management settings.

Custom platforms

The Asset Administrator adds a custom platform that includes uploading the custom platform script with the platform's commands and details. Auditors and Partition Administrators have read only rights. Custom platforms are global across all partitions. The custom platform can be selected when adding or updating an asset.

Navigate to:

  • web client: Asset Management > Connect and Platforms > Custom Platforms.

Use the following toolbar buttons to manage the custom platform settings.

Table 173: Custom Platforms: Toolbar
Option Description
Add

Add a custom platform. For more information, see Adding a custom platform.

Delete

Remove the selected custom platform.

CAUTION: If the custom platform is associated with an asset, deleting the custom platform may halt password or SSH key validation and reset. A warning displays, indicating that the asset will be assigned to the Product platform type Other. Enter Force Delete to confirm the deletion.

Edit

Edit the selected platform.

Download

Download the selected custom platform JSON script.

Refresh

Update the list of custom platforms.

Related Topics

Creating a custom platform script

Adding a custom platform

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating