When importing objects, such as accounts, assets, or users, Safeguard for Privileged Passwords expects the import file to be a Comma Separated Values (CSV) file.
A CSV file is a text file used to store database entries where each line is a unique record and each record consists of fields of data separated by commas. The easiest way to create a CSV file is by using a spreadsheet program such as Microsoft Excel; however, you can use any text editor, such as Notepad, to create a comma-delineated file, as long as you save the file with a .csv file type extension.
The order of the columns is not important, but the title of the column must match the property name.
|
Important: You must not add any trailing spaces in the properties you define in the CSV file. |
To create a customized .csv file template
Select specific template properties from the template properties table, or select the "select all" check box in the heading.
|
Note: Safeguard for Privileged Passwords preselects the required properties; you can select any additional properties you desire. |
Select Download Template to save a copy of the template properties table to a location of your choice.
|
TIP: Click (or tap) the |
|
NOTE: Click (or tap) Export Full Table, in upper the right corner above the properties table, to save a copy of the properties table. |
Locate the downloaded template and add your specific information to the template.
|
TIP: Users AdminRoles property: The value for the Authorizer Administrator is "GlobalAdmin". |
|
Note:Safeguard for Privileged Passwords does not add an object if any column contains invalid data in the .csv file with the follow exceptions:
|
The Asset Administrator can manually check, change, or set an account password from the Account Security menu.
To manually check, change, or set an account password
|
Note: You can also right-click (or press and hold) the account name to open the context menu. |
Select one of these options:
|
Note: The "Set" option does not change the account password on the asset. |
|
Note: See the progress and results of the "Check" and "Change" options in the Toolbox | Tasks pane. For more information, see Viewing task status. |
Generate Password - select this option to have Safeguard for Privileged Passwords generate a new random password, that complies with the password rule that is set in the account's profile.
Manual Password - select this option to manually set the account password in the Safeguard for Privileged Passwords database.
In the Set Password dialog, enter the password and click (or tap) OK.
Clicking OK updates the Safeguard for Privileged Passwords database.
The Asset Administrator and Auditor can access a previous password for an account for a specific date.
|
NOTE: The Password Archive dialog only displays previously assigned passwords for the selected asset based on the date specified. This dialog does not display the current password for the asset. |
To access an account's previous password
Or, click (or tap) Password Archive from the toolbar.
In the Password Archive dialog, select a date.
|
TIP: If you select today's date (or a previous date) and no entries are returned, this indicates that the asset is still using the current password. |
|
Note: You view an account's password validation and reset history on the Check and Change Log tab. |
A Safeguard for Privileged Passwords account group is a set of accounts which you can add to the scope of an access request policy. For more information, see Creating an access request policy.
The Auditor and the Security Policy Administrator have permission to access Account Groups.
The Account Groups view displays the following information about the selected account group.
Tab | Description |
---|---|
General tab | Displays general information about the selected account group. |
Accounts tab | Displays the accounts associated with the selected account group. |
Access Request Policies tab | Displays the entitlements and access request policies associated with the selected account group. |
History tab | Displays the details of each operation that has affected the selected account group. |
Use these toolbar buttons to manage account groups.
Option | Description |
---|---|
|
Add account groups to Safeguard for Privileged Passwords. For more information, see Adding an account group. |
|
Add dynamic account groups to Safeguard for Privileged Passwords. For more information, see Adding a dynamic account group. |
Remove the selected account group from Safeguard for Privileged Passwords. For more information, see Deleting an account group. | |
Update the list of account groups. |
© 2019 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy