On the home page of the console, click Access Control.
In the navigation pane, click Resource Pools.
In the details pane, click Create. A left pane with Create Resource pool is displayed with General and Resources settings.
In the Resources page, specify a name for the Resource Pool.
Add a Description.
Specify the Type of resource pool from the list.
Click Next. Resources page is displayed for configuration.
Click Add. Select the resources.
Click Add.
Select or enter the Default Credential. For more information, see Default Credential.
Click Create.
To modify a resource pool: In the details pane, select the resource pool you want to modify, then click the edit icon next to the resource pool name or click on the resource pool you want to modify and Edit Resource Pool page opens up on the right pane. Optionally, you can also modify the default credential at this point.
Configure the following fields:
Name: Specify a name for the resource pool.
Description: Describe the purpose of this resource pool.
Add, Remove or Delete resources.
NOTE:You cannot delete a Resource Pool if it is a part of an assignment.
NOTE:You cannot modify the type of the resource pool.
A credential with least privileges, should be selected as a Default Credential, for each resource added in a Resource Pool. This would help organizations in implementing the least privilege model as per the security recommendations and also minimizes the effort required to select a Credential while creating the access permissions.
To create permissions in Access Control, each Windows Agent must be linked with a Credential Vault, where the Credentials are stored for single sign-on purposes for respective Agents. To link a Windows Agent with a Credential Vault follow the procedure:
Go to Hosts select Windows Agent.
Click Modify Host and select a value for the Vault.
Click Finish.
You can link the following two types of Windows Agents:
Active Directory type Credential Vaults can be used for linking, if the Windows Agent is connected to an Active Directory Domain and to reference only Active Directory accounts in the Agent.
Windows Hosts type Credential Vaults can be used for linking, if the Windows Agent is a stand-alone Windows Host or a Windows Agent which is part of a Domain but also has Local Accounts. To reference both the Local Accounts and Active Directory accounts in the Agent, the Windows Host type vault in Credential Vault should be linked to an Active Directory domain.
These Resources can use a username as Default Credential, which should be typed-in. For example, root or administrators.
These Resources can use any Credential, which belongs to them in the Credential Vault.
These Resources can use any Credential, which belongs to them in the Credential Vault or the linked Active Directory domain.
NOTE:Default credentials are not required for the following resource pools:
Database
Applications
Keys