One Identity Safeguard for Privileged Passwords 2.9 - Administration Guide

Linked Accounts tab (user)

The Linked Accounts tab displays the directory accounts linked to the selected user that can be used in session request policies to access the assets or accounts defined within the scope of the policy.

Accounts can be:

• Manually: Click Add Linked Account from the details toolbar.
• Automatically: See Adding a directory user group and the check box labeled Automatically link Managed Directory Accounts.

Table 189: Users: Linked Accounts tab properties

Property	Description
Name	The account name.
Domain Name	The name of the domain where the linked account resides.
Service Account	A check in this column indicates that the account is a service account.
Password Request	A check in this column indicates that password release requests are enabled for the account.
Session Request	A check in this column indicates that session access requests are enabled for the account.
Needs a Password	Displays if a password is not set for the account. For more information, see Checking, changing, or setting an account password.
Description	Information about the selected account.

Use the following buttons on the details toolbar to manage the linked accounts associated with the selected user.

History (user)

On the History tab, administrators can view or  Export the details of each operation that has affected the selected use on the History tab (except for Asset Administrators).  

The top of the History tab contains the following information:

• Items: Total number of entries in the history log.
• Refresh: Update the list displayed.
• Export: Export the data to a .csv file.

• Search: For more information, see Search box.

• Time Frame: By default the history details are displayed for the last 24 hours. Click one of the time intervals at the top of the grid to display history details for a different time frame. If the display does not refresh after selecting a different time interval, click Refresh.

Select an event to display this additional information for some types of events (for example, create and update events).

Managing users

Use the controls and tabbed pages on the Users page to perform the following tasks to manage Safeguard for Privileged Passwords users:

• Adding a user
• Requiring secondary authentication log in
• Adding a user to user groups
• Assigning a user to partitions
• Adding a user to entitlements
• Linking a directory account to a user
• Modifying a user
• Deleting a user
• Importing objects
• Setting a local user's password
• Unlocking a user's account
• Enabling or disabling a user

Adding a user

It is the responsibility of either the Authorizer Administrator or the User Administrator to add Safeguard for Privileged Passwords users.

To add a user

1. Navigate to Administrative Tools | Users.
2. In Users, click Add User from the toolbar.
3. In the User dialog, provide information in each of the tabs:
   • Identity tab (add user)Where you define the identity provider and the user's contact information.
   • Authentication tab (add user)Where you define the authentication provider, login name and password, if necessary.
   • Location tab (add user)Where you set the user's time zone.
   • Permissions tab (add user)Where you set the user's administrator permissions.