立即与支持人员聊天
与支持团队交流

One Identity Safeguard for Privileged Passwords 2.11 - Administration Guide

Introduction System requirements Using the virtual appliance and web management console Using the cloud Setting up Safeguard for Privileged Passwords for the first time Search box Using the web client Installing the desktop client Using the desktop client Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Discovery Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificate settings Cluster settings External Integration settings Messaging settings Profile settings Safeguard Access settings Sessions settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions Appendix E: Historical changes by release Glossary

Assigning assets or accounts to a partition profile

This topic explains how to assign an asset or an account to a partition profile. You can only add assets and accounts to a profile that are assigned to the scope of the partition.

You can also configure Safeguard for Privileged Passwords to run automatic Asset Discovery or Account Discovery jobs. For more information, see Discovery.

Only associate accounts to a partition profile that you want Safeguard for Privileged Passwords to manage. For example, a directory can be added to any partition as an asset and any partition profile can be assigned. If directory user accounts are associated with a partition profile, Safeguard for Privileged Passwords will automatically change the user passwords according to the change password schedule in the profile. Depending on the settings, this could prevent a directory user from logging in to Safeguard for Privileged Passwords.

To add assets or accounts to a partition profile

  1. Navigate to Administrative Tools | Partitions.
  2. In Partitions, select a partition from the object list and open the Profiles tab.
  3. Select a profile and click the  Details icon.

  4. To add an asset to the selected partition profile, switch to the Assets tab of the partition profile's details window.
    1. Click Add Asset.
    2. On the Asset dialog, select the assets to be added.
    3. Click OK.
  5. To add an account to the selected partition profile, switch to the Accounts tab of the partition profile's details window.
    1. Click  Add Account.
    2. On the Account dialog, select the accounts to be added.
    3. Click OK.

If you do not see the account you are looking for, it might be assigned to a different partition. If you have have Asset Administrator permissions to create assets and accounts, you can click  Create New to add an account. For more information, see Adding an account.

Related Topics

Assigning a profile to an asset

Setting a default partition profile

Modify a partition

To modify a partition

  1. Navigate to Administrative Tools | Partitions.
  2. In Partitions, select a partition from the object list.
  3. Select the view of the partition's information you want to modify (General, Assets, Accounts, or Profiles).

    For example:

    • To change a partition's name or description, or delegate partition management to a user, click the  Edit icon.

      Note: You can also double-click a partition name to open the General settings edit window.

    • To assign assets to the partition, open the Assets tab.

      Note: You can multi-select items to assign more than one asset to a partition.

    • To modify the password validation and reset settings, open the Profiles tab, select a profile, and click the  Edit icon.
  4. To set the default partition, select the partition, then click Set as Default from the toolbar or context menu.
  5. To view or export the details of each operation that has affected the selected partition, open the History tab. For more information, see History tab.
Related Topics

Adding a partition

Creating a partition profile

Removing assets from a partition

Adding assets to a partition

Assigning an asset to a partition

Delete a partition

When deleting a partition, you must designate another partition to transfers all assets and accounts. The partition profiles and associated profile settings, discovery jobs, and history data for the partition you are deleting are deleted along with the profile.

To delete a partition

  1. Navigate to Administrative Tools | Partitions.
  2. In Partitions, select a partition from the object list.
  3. Click  Delete Selected.
  4. In the Asset Partition dialog, select the partition where assets and accounts are to be reassigned.

  5. Click OK to reassign the assets and accounts and remove the selected partition.

Settings

(web client) Settings

In the web client, click the  Settings menu on the left to go to the Settings: Appliance page.

The following Settings are available. See each section for a description of the functions available.

Additional information is available for Networking and Time. For more information, see How do I modify the appliance configuration settings.

(desktop client) Settings

Using the desktop client, the Settings page in the  Administrative Tools is where you configure Safeguard for Privileged Passwords to run backups, install updates, manage clusters, manage certificates, enable event notifications, enable external integration, define profile configuration settings, define user password rules, define discovery rules, and run troubleshooting tools.

You must have administrator permissions to access the Settings page and the administrator permissions you have determine what you can do.

Use the Search control at the top of the Settings page to locate a particular setting. For example, if you type password and press the Enter key, a list of all the password settings appears; select an entry from this list to display the selected settings page.

The following Settings are available. See each section for a description of the functions available.

相关文档