Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 2.11 - Administration Guide

Introduction System requirements Using the virtual appliance and web management console Using the cloud Setting up Safeguard for Privileged Passwords for the first time Search box Using the web client Installing the desktop client Using the desktop client Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Discovery Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificate settings Cluster settings External Integration settings Messaging settings Profile settings Safeguard Access settings Sessions settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions Appendix E: Historical changes by release Glossary

Auditor permissions

The Auditor administrator has read-only access to all features, giving him the ability to review all access request activity:

  • Monitors appliance information.
  • Reviews everything.
  • Exports object history.
  • Runs entitlement reports.
Table 201: Auditor administrator: Permissions
Navigation Permissions

Dashboard

View only.

Activity Center

View and export activity events.

Audit access request workflow.

Reports

View and export entitlement reports.

Administrative Tools | Toolbox

Access to all Administrative Tools views and the Tasks pane.

Administrative Tools | Accounts

View only.

Administrative Tools | Account Groups

View only.

Administrative Tools | Assets

View Asset Discovery jobs.

Administrative Tools | Asset Groups View only.

Administrative Tools | Entitlements

View only.

Administrative Tools | Partitions

View only.

Administrative Tools | Settings:

 

  • Access Request
View only.
  • Appliance

View Appliance Information.

Run diagnostics on appliance.

View licensing information.

View Lights Out Management (BMC) settings.

View Networking settings.

View Time settings.

View update history.

  • Asset Management

View only.

  • Backup and Retention
View only.
  • Certificates
View only.
  • Cluster
View only.
  • External Integration
View only.
  • Messaging

Login notification: View only.

Set message of the day.

  • Profile

View only.

  • Safeguard Access
View only.
  • Sessions
View only.

Administrative Tools | Users

View only.

Administrative Tools | User Groups

View only.

Authorizer Administrator permissions

The Authorizer Administrator is the permissions administrator and performs the following:

  • Creates (or imports) Safeguard for Privileged Passwords users.
  • Grants administrator permissions to users.
  • Sets passwords, unlocks, and enables or disables both local and directory user accounts.
  • Creates and maintains the Password Rule.

NOTE: Also has User Administrator and Help Desk Administrator permissions.

Important: Authorizer Administrators can change the permissions for their own account, which may affect their ability to grant permissions to other users. When you make changes to your own permissions, they take effect next time you log in.

Table 202: Authorizer Administrator: Permissions
Navigation Permissions

Activity Center

View and export user activity events, including authentication events.

Administrative Tools | Toolbox

Access to the Users and User Groups view.

Access to Tasks pane.

Administrative Tools | Settings

 
  • External Integration | Identity and Authentication
View only of directories used for identity and authentication. External Federation and Radius providers can be configured for authentication use.
  • Messaging | Message of the Day

Login notification: View only.

Set message of the day.

  • Safeguard Access | Login Control

View only.

  • Safeguard Access | Password Rules
Configure user password rules.
  • Safeguard Access | Time Zone

Set default time zone.

Administrative Tools | Users

Add, modify, delete, and import users.

Set administrator permissions.

Set passwords and unlock administrator accounts.

Delete administrator users.

Enable or disable administrator users.

Administration Tools | User Groups

Add or delete directory groups, if a directory has been added to Safeguard for Privileged Passwords.

Help Desk Administrator permissions

A Help Desk Administrator:

  • Sets passwords for non-administrative user accounts.
  • Unlocks accounts for all user accounts.

NOTE:  Help Desk Administrators can only view the user object history for their own account.

Table 203: Help Desk Administrator: Permissions
Navigation Permissions
Activity Center View and export user activity events.

Administrative Tools | Toolbox

Access to the Users view and the Tasks pane.
Administrative Tools | Settings:  
  • Messaging | Message of the Day

Login notification: View only.

Set message of the day.

  • Safeguard Access | Login Control

View only.

  • Safeguard Access | Password Rules

View only.

  • Safeguard Access | Time Zone

View only.

Administrative Tools | Users

Set passwords and unlock accounts for non-administrator users.

Operations Administrator permissions

The Operations Administrator monitors the status of the appliance and can reboot the appliance.

NOTE: This user can be a non-interactive user; that is, an automated script or external monitoring system.

Table 204: Operations Administrator: Permissions
Navigation Permissions

Activity Center

View and export appliance activity events.

Administrative Tools | Toolbox Access to the Tasks pane.
Administrative Tools | Settings:

 

  • Access Request | Enable or Disable Services

View only.

  • Appliance
  • Monitor status of the appliance.

    Shutdown or restart the appliance.

    Run diagnostics on the appliance.

    Generate a support bundle to assist technical support.

    View licensing information.

    View Networking settings.

    View Time settings.

    View update history.

    • Backup and Retention

    Configure backup and retention settings, define archive servers, and manage backups.

    • Certificates
    View only.
    • Cluster

    View only. Monitor the status of the clustered environment.

    • External Integration

    View only.

    • Messaging

    Login notification: View only.

    Set message of the day.

    • Safeguard Access
    View only.
    • Sessions
    View only.
    Related Documents