Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 2.5 - Administration Guide

Introduction System requirements Installing the One Identity Safeguard for Privileged Passwords desktop client Setting up Safeguard for Privileged Passwords for the first time Getting acquainted with the console Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Directories Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificate settings Cluster settings External Integration settings Messaging settings Profile settings Access settings Sessions settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions
How do I access the API How do I audit transaction activity How do I configure external federation authentication How do I manage accounts on unsupported platforms How do I modify the appliance configuration settings How do I prevent Safeguard for Privileged Passwords messages when making RDP connections How do I see which assets and/or accounts are governed by a profile How do I set the appliance system time How do I setup discovery jobs How do Safeguard for Privileged Passwords database servers use SSL What are the access request states What do I do when an appliance goes into quarantine What is required for One Identity Safeguard for Privileged Passwords, embedded sessions module What is required to integrate with Starling Identity Analytics & Risk Intelligence What needs to be set up to use Application to Application What role-based email notifications are generated by default When does the rules engine run for dynamic grouping and tagging Why did the password change during an open request Why join Safeguard for Privileged Passwords to One Identity Starling
Safeguard Desktop Player Appendix: Safeguard ports

Manually adding a tag to an account

Asset Administrators can manually add and remove tags to an account using the Tags pane, which is located at the bottom of the General tab when an account is selected on the Accounts view.

To manually add a tag to an account

  1. Navigate to Administrative Tools | Accounts.
  2. In Accounts, select an account from the object list (left-pane).
  3. Open the General tab and scroll down to view the Tags pane.
  4. Click next to the Tags title.

  5. Place your cursor in the edit box and enter the tag to be assigned to the selected account.

    As you type, existing tags that start with the letters entered will appear allowing you to select a tag from the list.

    To add additional tags, press Enter before entering the next tag.

  6. Click OK.

    If you do not see the new tag, click the Refresh toolbar button.

  7. To remove a manually assigned tag, click next to the Tags title and click the X inside the tag box to be removed.

    NOTE: You cannot manually remove dynamically assigned tags which are indicated by a lightening bolt icon. You must modify the rule associated with the dynamic tag if you want to remove it. For more information, see Modifying an asset or asset account tag.

Adding an account to one or more account groups

From the Accounts view you can add an account to one or more account groups.

To add an account to account groups

  1. Navigate to Administrative Tools | Accounts.
  2. In Accounts, select an account from the object list and open the Account Groups tab.
  3. Click  Add Account Group from the details toolbar.
  4. Select one or more account groups from the list in the Account Groups dialog and click OK.

    Note: You can also double-click an account group name to add it.

If you do not see the account group you are looking for, depending on your Administrator permissions, you can create it in the Account Groups selection dialog. (You must have Security Policy Administrator permissions to create account groups.)

To create a new account group from the Account Groups selection dialog

  1. Click  Create New.

    For more information about creating account groups, see Adding an account group.

  2. Create additional account groups, as required.
  3. Click OK in the Account Groups selection dialog to add the new account to the selected account group.
Related Topics

Adding one or more accounts to an account group

Modifying an account

To modify an account's information

  1. Navigate to Administrative Tools | Accounts.
  2. In Accounts, select an account from the object list.
  3. Double-click the General information box or click the  Edit icon.

    Note: You can also double-click an account name to open the General settings edit window.

    Note: Once you add an account, you cannot modify an account's associated asset or its name.

  4. To view the selected account's password validation and reset history, switch to the Check and Change Log tab.
  5. To view or export the details of each operation that has affected the selected account, switch to the History tab.
  6. To reset an account's password, right-click the account name and navigate to Change Password or Set Password from the context menu. For more information, see Checking, changing, or setting an account password.

Deleting an account

Note: When you delete an account, Safeguard for Privileged Passwords does not delete it from its associated asset, it simply removes it from Safeguard for Privileged Passwords.

To delete an account

  1. Navigate to Administrative Tools | Accounts.
  2. In Accounts, select an account from the object list
  3. Click Delete Selected.

    Note: If you delete a service account, Safeguard for Privileged Passwords changes the asset's authentication type to None which disables automatic password management for all accounts that are associated with this asset. All assets must have a service account in order to check and change the passwords for the accounts associated with it. For more information, see About service accounts.

  4. Confirm your request.
Related Documents