Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 6.7 - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Getting started with the desktop client Using the desktop client Search box Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Discovery Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificates settings Cluster settings Enable or Disable Services settings External Integration settings Messaging settings (desktop client) Password Management settings Safeguard Access settings SSH Key Management settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions SPP Glossary About us

Approvals (web client)

Click Approvals on the left of the page to manage approvals. On the Approvals page, you can:

  • View details by selecting a request then looking at the details display on the right of the page.
  • Approve one or more request: Select the requests. Then, click Approve all selected requests to approve all the requests you selected. Optionally, enter a comment.
  • Deny one or more request: Select the requests. Then, click Deny all selected requests to deny all the requests you selected. Optionally, enter a comment.
  • Change the columns that display: Click and select the columns you want to see. You can select columns including:
    • Action: Displays Approve only this request and Deny only this request.
    • Requester / Status: Displays the user name and the status of the approval (for example, Pending 1 approval).
    • Asset / Access Type: Displays the name of the asset and the type of access (for example, Password, SSH Key, RDP, SSH, or Telnet).
    • Account: Displays the managed account name.
    • Ticket Number: Displays the ticket number, if required.
    • Request For: Displays the date and time as well as the window of availability (for example, March 20, 2021 9:56 AM 2 hours).
  • Search: For more information, see Search box.

For more information, see Approving a password release request.

Reviews (web client)

Select Reviews on the left of the page to manage reviews. On the Reviews page, you can:

  • View details by selecting a request then looking at the details display on the right of the page, including the workflow.
  • Mark one or more request as reviewed: Select the requests. Do the following:
    • If no comment is needed, click Mark all the selected requests as reviewed.
    • If a comment is needed, this icon will display as One or more of the selected requests requires review comments. Add the comment. Then, click Mark as Reviewed.
  • Change the columns that display: Click Select columns to display then select the columns you want to see.
    • Action: Displays This request requires review comments or Mark only this request as reviewed.
    • Requester: Displays the user name of the requester.
    • Access Type: Displays the type of access (for example, Password, SSH Key, RDP, SSH, or Telnet).
    • Account: Displays the managed account name.
    • Ticket Number: Displays the ticket number, if required.
    • Request For/Duration: Displays the date and time as well as the window of availability (for example, March 20, 2021 9:56 AM 2 hours).
  • Search: For more information, see Search box.

Favorites (web client)

On your Home or My Requests page, you will see My Favorites (number of favorites). You can quickly make requests by creating a favorite of requests you make often, then just click the favorite.

You must be authorized to create requests for the assets and accounts you choose to include in a favorite. To change the look of the favorite tiles, click for large icons or for small icons.

If Show Account Availability is enabled you can identify if an privileged account is available or not. Accounts display a warning badge if in use. Hover over the badge to display <X> of <X> accounts in use. Select an available account. Showing account availability requires additional API queries that may impact performance. This toggle is set by the user not an administrator. There is no global toggle. For more information, see Application Settings and desktop client download (web client).

Add a favorite

  1. To the right of My Favorite Requests, click New Favorite.
  2. On the Asset Selection page, select the assets to access. Use the following approaches to quickly find the assets you want:
    • Click Search to search the Asset, Network Address, or Platform. For more information, see Search box.
    • Once you've selected assets, the number of Assets selected displays in the lower left. You can toggle between Show only selected and Show all.
    • In the lower right, select the number of Items per page that display. Click the arrows to move through the pages.
  3. Click Next.
  4. On the Account & Access Type Selection page, select the account for the asset. If there are several accounts associated with an asset:
    1. Click the Select Account(s) link.
    2. Select the account(s) for that asset.
    3. Click OK.
    4. Continue to select accounts for each asset.
  5. Click Next to provide favorite details:
    1. Enter a Name for the favorite.
    2. Enter a Brief Description.
    3. Select the color of the favorite's tile.
  6. Click Add.

Use and manage a favorite

Once a favorite has been created, you can use and make changes to the favorite.

  1.  Click the menu on the right of the favorite and perform a task:
    • Click Submit Request to submit the request and launch the request workflow. Follow the workflow steps. For more information, see Requesting a password release.
    • Click Change Color to change the color of the favorite. This is useful to color code types of requests.
    • Click Remove to delete the favorite.

Application Settings and desktop client download (web client)

You can control page displays, check the version, or download the Safeguard for Privileged Passwords desktop Windows client. The settings you see are based on your role and permissions.

Changing settings, check the version, and download the desktop Windows client

  1. In the upper right corner, next to your user name, click then Application Settings to proceed. Or, from the Home page, click Dashboard settings.
  2. On the My Settings dialog, select any of the following tabs, which are available based on your role and permissions.
    • General tab:
      • Pages: Toggle the pages which are available by selecting on or off. If your role changes, you can change the display in the future.
      • Homepage: Select the page you want to see first when you log on.
      • Location: Select your time zone in the drop-down box. Changing your time zone may be prohibited based on your organization's security procedures. If available, choose to:
        • Display times in local computer time: This is the default. It is the time zone set on your local computer.
        • Display times in my configured time zone: This is the time zone that is set on this page.
      • About: The Appliance Version displays.
      • Download Windows Client: Click to download the Windows desktop client.
    • Home tab, Home Page Widgets:
      • Message of the Day and My Request Favorites: Toggle selections on or off.
      • Tile Set (Requests, Approvals, and Reviews): Toggle the display on or off. Then, select the statuses you want to display. For example, to view your available requests, you would set the Tile Set: My Requests on then select the Available check box. What you can set is based on your role and permissions.
    • My Requests tab (if available):
      • My Request Widgets: Toggle displaying My Request Favorites on or off.
      • My Request Options: Toggle Show Account Request Availability (may impact performance) on or off. By default, showing account availability is off.
        If Show Account Availability is enabled you can identify if an privileged account is available or not. Accounts display a warning badge if in use. Hover over the badge to display <X> of <X> accounts in use. Select an available account. Showing account availability requires additional API queries that may impact performance. This toggle is set by the user not an administrator. There is no global toggle.
        See:
      • My Request Options: Toggle Show Session Launch Button on or off. It is off by default. If toggled on, after creating a session request, the Launch icon displays in the My Requests dialog.
    • Personal Password Vault (if available): On the Personal Password Vault page, control available widgets based on your role and permissions. For more information, see Personal password vault (web client).
    • Approvals tab (if available): On the Approvals page, view and managed approvals . For more information, see Approvals (web client).
    • Reviews tab( if available): On the Reviews page, view and manage reviews. For more information, see Reviews (web client).
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating