立即与支持人员聊天
与支持团队交流

One Identity Safeguard for Privileged Passwords 6.0 LTS - Administration Guide

Introduction System requirements Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Search box Using the web client Installing the desktop client Using the desktop client Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Discovery Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificate settings Cluster settings External Integration settings Messaging settings Profile settings Safeguard Access settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions Appendix E: Historical changes by release Glossary

Viewing details

Additional detailed information is available for access requests listed in the request grids on the Access Requests view.

To see the details of an access request

  1. Double-click a request to view additional details.

  2. Double-click to close the request details.

    NOTE: Clicking Refresh at the top of the view also closes the details in addition to retrieving the latest access requests.

Account Automation

The Account Automation tab on the Dashboard allows Asset Administrators to view information regarding accounts that are failing different types of tasks. This dashboard includes both automated and manual tasks in the failure results. Clicking one of the failure task tiles across the top of the view displays additional information about the accounts belonging to that category.

This dashboard is available to Safeguard for Privileged Passwords users assigned the following administrative permissions:

  • Asset Administrator: Full control for accounts related to all Safeguard for Privileged Passwords assets
  • Auditor: Read-only view
  • Delegated Partition Owner: Control for accounts related to the accounts and assets managed through delegation
Account Automation: Tiles
  • Password Check Failures: Displays a list of accounts where password check tasks failed.
  • Password Change Failures: Displays a list of accounts where password change tasks failed.
  • SSH Key Change Failures: Displays a list of accounts where SSH key change tasks failed.
  • Suspend Account Failures: Displays a list of accounts where suspend tasks failed.
  • Restore Account Failures: Displays a list of accounts where restore tasks failed.
Account Automation: Toolbar

Use the toolbar at the top of the details grid to perform the following tasks.

  • Rerun task: Select to rerun the selected task.
  • Export: Select to create a .csv or .json file of the currently displayed account automation grid and save it to a location of your choice.
  • You can convert timestamps to local time, if necessary. For more information, see Converting time stamps.
  • Columns: Select to display a list of columns that can be displayed in the grid. Select the check box for data to be included in the grid. Clear the check box for data to be excluded from the grid.

Activity Center

The Activity Center is the place to go to view the details of specific events or user activity. The appliance records all activities performed within One Identity Safeguard for Privileged Passwords. Any administrator has access to the audit log information; however, your administrator permission set determines what audit data you can access. For more information, see Administrator permissions.

Activity Center: Main page toolbar

The toolbar at the top of the main Activity Center page contains these options.

  • Clear: Resets the current search criteria back to the default settings (all activity occurring within the last 24 hours.)
  • Schedule: Allows you to define when the activity audit log report is to be generated and sent via email as well as the format of the report (.csv or .json). For more information, see Scheduling an activity audit log report.
  • Open: Allows you to access previously saved search and scheduled reports.
  • Save: Saves the current search criteria which can be used later to generate the report. For more information, see Saving search criteria.
  • Run button: Generates an activity audit log report based on the search criteria specified.

In addition, query tiles display the criteria you have applied to search the activity data. By default, only the Activity category and Time frame tiles display. Use the Add button to specify additional query criteria to retrieve the information you are looking for. For more information, see Applying search criteria.

Activity Center: Results page toolbar

Once an activity audit log report is generated, the results page contains the search results grid and these toolbar options.

  • Back: Takes you back to the query page where you can modify the search criteria.
  • Refresh: Closes the details and updates the search results page.

Applying search criteria

Use the query builder in the Activity Center to add and remove data from your activity audit log report to get the information you need.

By default, an activity audit log report includes all activity occurring within the last 24 hours. However, using the query tiles provided you can specify search criteria to retrieve specific information from the activity audit log. The search criteria available includes:

  • Activity category (to narrow parameters and event details)
  • Time frame
  • User
  • Asset
  • Account
  • Search keyword or value: For sessions, you can search by keyword or value.

To apply search criteria to the audit log

Activity Category and Time frame are required to generate a report. Other search criteria is optional and allows you to narrow the report to the exact parameters provided.

  1. From the Safeguard for Privileged Passwords desktop Home page, select Activity Center.

  2. I would like to see defaults to All Activity. Click the tile to limit the report to a particular type of activity and select the activity category to be included in the report.

  3. Occurring within the defaults to Last 24 Hours. To specify a different time frame, click the tile and select the time frame to be included in the report. If using the Custom option, specify the custom date and time range.

  4. Click the Add button to further filter results. The options to add are based on the selections you made and may include user, asset, or account. When you add filters, additional tiles display such as: involving the asset.
    • If you select Add User, you can specify one user. A tile with the user displays.
    • If you select Add Asset, you can select an asset. A new tile with the asset displays. When an account is specified, the Add Asset option is not available.
    • If you select select Add Account, you can select the account. When an asset is specified, the Add Account option is not available.

  5. To search session activity for a specific keyword or value.

    1. Change the activity category (I would like to see) to Session Specific Activity (or In-Session Activity).
    2. Click the Add button and select Add Search value.

    3. In the Enter a Search Value dialog, enter the keyword or value (e.g., regedit) and click OK.

    An additional tile appears listing the keyword or value specified. If you later change the activity category, the keyword tile will be dimmed indicating it will not be included in the query.

  6. To remove or edit your selections, use the icons in the upper-right corner of a query tile:

    • Clear: Resets the value back to the default. Clear is only available for Activity category and Time frame.

    • Delete: Removes search criteria tiles you added.

    • Edit: Displays the corresponding dialog allowing you to modify your selection. You can also click a query tile to edit your selection.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级