One Identity Safeguard for Privileged Sessions 6.0.4 - Administration Guide

Creating and editing user lists

User lists are white- or blacklists of usernames that allow fine-control over who can access a connection or a channel.

Figure 148: Policies > User Lists — Configuring user lists

To create a new user list or edit an existing one

1. Navigate to the User Lists tab of the Policies menu and click to create a new user list. Enter a name for the list User List field (for example serveradmins).

   Caution: Usernames, the names of user lists, and the names of usergroups are case sensitive.

2. Click to display the list of users.

3. Select the default policy of the user list. Select Reject for a whitelist, that is, to allow access only to the members of the list. Select Accept for a blacklist, that is, to allow access to everyone except the members of the list.

4. Click and enter a username into the displayed field. Repeat this step until all required usernames are listed.

   Caution: Usernames, the names of user lists, and the names of usergroups are case sensitive.

5. Click to save the list.

6. To actually restrict access to a channel based on the user list created in the previous steps:

   • Navigate to the Channel Policies tab of the type of connection you want to control and click to display the details of the policy.

   • Click in the Group section to add a new group to the policy and enter the name of the group. Repeat this step to add other groups.

     Caution: Usernames, the names of user lists, and the names of usergroups are case sensitive.

     NOTE: When listing more groups, users of any of the listed groups can access the channel. For details, see Creating and editing channel policies. When listing both a whitelist and blacklist in the Group section and a username appears on both lists, the user will be able to access the channel.

   • Click .