Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 2.9 - Administration Guide

Introduction System requirements Using the virtual appliance and web management console Installing the desktop client Setting up Safeguard for Privileged Passwords for the first time The console Navigation pane Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Discovery Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificate settings Cluster settings External Integration settings Messaging settings Profile settings Safeguard Access settings Sessions settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Historical changes by release Glossary

Summary tab (add dynamic account group)

On the Summary tab of the Dynamic Account Group dialog, review the rules defined and add the dynamic account group.

  1. Review the rules defined for this dynamic account group.

  2. Return to the Account Rules tab to modify any of the rules if necessary.
  3. Click Add Account Group to create the dynamic account group.

Adding one or more accounts to an account group

From the Account Groups view, you can add one or more accounts to an account group.

To add accounts to an account group

  1. Navigate to Administrative Tools | Account Groups.
  2. Select an account group from the object list and click the Accounts tab.
  3. Click  Add Account from the details toolbar.
  4. Select one or more accounts from the list in the Accounts selection dialog and click OK.

Create an account to add to an account group

If you do not see the account you are looking for and you have Asset Administrator permissions, you can click  Create New. For more information the information to provide, see Adding an account. Click OK in the Accounts selection dialog to add the accounts to the selected account group.

Related Topics

Adding an account to one or more account groups

Adding accounts to an access request policy

To add accounts to an access request policy

  1. Navigate to Administrative Tools | Account Groups.
  2. In Account Groups, select an account group from the object list and open the Access Request Policies tab.
  3. Click  Add to Policy from the details toolbar.
  4. Select a policy from the list in the Access Request Policy selection dialog and click OK.

Modifying an account group

To modify an account group's information

  1. Navigate to Administrative Tools | Account Groups.
  2. In Account Groups, select an account group from the object list.
  3. Select the view of the account group's information you want to modify (General, Accounts, or Access Request Policies).

    For example:

    • To change the selected account group's name or description, click the General tab then click the  Edit icon. You can also double-click an account group name to open the General settings edit window.
    • To add (or remove) accounts associated with the selected account group, click the Accounts tab. You can multi-select members to add or remove more than one from an account group.
    • To add (or remove) accounts in a dynamic account group, double-click the dynamic account group and change the selections on the Account Rules tab.
    • To add (or remove) the selected account group to the scope of a policy, switch to the Access Request Policies tab. For more information, see Access Request Policies tab (account group).
  4. To view or export the details of each operation that has affected the selected account group, switch to the History tab. To export, select the time frame then click Export.

Related Topics

Adding an account group

Related Documents