Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 8.0 LTS - Administration Guide

Introduction System requirements Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Home page Privileged access requests Appliance Management
Appliance Backup and Retention Certificates Cluster Global Services External Integration Real-Time Reports Safeguard Access Appliance Management Settings
Asset Management
Account Automation Accounts Assets Partitions Discovery Profiles Tags Registered Connectors Custom platforms Importing objects
Security Policy Management
Access Request Activity Account Groups Application to Application Cloud Assistant Asset Groups Entitlements Linked Accounts User Groups Security Policy Settings
User Management Reports Vaults Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP and SPS join guidance Appendix C: Regular Expressions

Adding one or more accounts to an account group

From the Account Groups view, you can add one or more accounts to an account group.

To add accounts to an account group

  1. Navigate to Security Policy Management > Account Groups.

  2. Select an account group and click View Details.

  3. Open the Accounts tab.

  4. Click  Add Account.

    NOTE: If you do not see the account you are looking for, depending on your Administrator permissions, you can create it in the New Account dialog (accessed via the  New Account button). (You must have Asset Administrator permissions to create accounts.)

  5. Select one or more accounts from the list in the Select accounts to add to group dialog.
  6. Click Select Accounts to save your selections.

Adding accounts to an access request policy

To add accounts to an access request policy

  1. Navigate to Security Policy Management > Account Groups.
  2. In Account Groups, select an account group from the object list and open the Access Request Policies tab.
  3. Click  Add from the details toolbar above the grid.
  4. Select a policy from the list in the Access Policies dialog and click OK.

Deleting an account group

When you delete an account group, Safeguard for Privileged Passwords does not delete the associated accounts.

To delete an account group

  1. Navigate to Security Policy Management > Account Groups.
  2. In Account Groups, select an account group from the object list.
  3. Click Delete.
  4. Confirm your request.

Application to Application

In order for third-party applications to use the Application to Application service to integrate with the Safeguard for Privileged Passwords vault, you must first register the application in Safeguard for Privileged Passwords. This can be done using the Security Policy Management > Application to Application page described below. Once the application is registered, you can enable or disable the service. For more information, see Global Services.

Application to Application displays a list of previously registered third-party applications. From this page, the Security Policy Administrator can add new application registrations, and modify or remove existing registrations. The Application to Application page displays the following details about application registrations.

Table 188: Application to Application: Properties
Property Description

Name

The name assigned to the application's registration.

Certificate User

The name of the certificate user associated with the registered application.

NOTE: If there is no certificate user listed for an application registration, contact your Security Policy Administrator to add one. The Application to Application service on the third-party application will not work with the Safeguard for Privileged Passwords vault until a certificate user has been specified.

Enable/Disable

Toggle on

Toggle off

Indicates whether the application registration is enabled. The toggle appears blue with the switch to the right when the service is enabled, and gray with the switch to the left when the service is disabled. Click the toggle to enable or disable an application registration.

NOTE: When an application registration is disabled, Application to Application access is disabled for that third-party application until the registration is enabled again.

Description

Information about the application's registration.

Use these toolbar buttons to manage application registrations.

Table 189: Application to Application: Toolbar
Option Description

Add

Add an application registration to Safeguard for Privileged Passwords. For more information, see Adding an application registration..

Remove

Remove the selected application registration from Safeguard for Privileged Passwords. For more information, see Deleting an application registration..

Refresh

Update the list of application registrations.

Edit

Modify the selected application registration.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating