Oracle Database Access
Oracle Database Credentials
Microsoft SQL Server Database Access
Microsoft SQL Server Database Credentials
MySQL Database Access
MySQL Database Credentials
Sybase Database Access
Sybase Database Credentials
PostgreSQL Database Access
PostgreSQL Database Credentials
MariaDB Database Access
MariaDB Database Credentials
IBM DB2 Database Access
IBM DB2 Database Credentials
The List of permissions under Database Resource Pools are:
Database Access
Users can access database from any thick client or command line tools, by connecting to the port of Database connector configured in the Resource.
Users are authenticated by the database.
Users from the below User Roles are authorized if specified in the respective Assignments to the Resources:
Local users or LDAP users, if the credentials are checked out.
Agent users, if the credentials are not checked out and an agent is present in the resource where the database client is invoked.
Database users, if the credentials are not checked out and agent is not present.
Database Credentials
Database Credentials
Users need to login into Privileged Access Manager's User Console.
Users are authenticated by authentication sources configured in Privileged Access Manager.
Users can check out the Credentials of authorized Resources from the User Console.
The table highlights the differences of each permissions with respective options and user experience:
|
Permissions |
Authentication |
Secondary Authentication |
Privilege Elevation |
Session Capture |
Mode of Access |
|---|---|---|---|---|---|
|
Database Access |
Database Server |
NA |
No |
Yes |
Thick Client/Command line |
|
Database Credentials |
Privileged Access Manager |
Yes |
NA |
NA |
Web Browser/ REST API |
In the Access Control > Assignments > Permissions > Checkout Options page, select the options as required.
Allow Password Change During Check-in: Move the radio button to the right to enable this option. By default this option is set to disabled and does not allow user to change the password while checking in. Enabling this option allows you to change the password while check in and provides the following options.
NOTE:For users upgrading from Privileged Access Manager 4.1 to 4.2 version, and want to continue using the same Check in and Check out behavior for credentials, do not enable the Allow Password Change During Check in option.
Whereas enabling the Allow Password Change During Check in is a new behavior of functionality from Privileged Access Manager 4.2 version onwards.
Credential Checkout Mode: Credential Checkout Mode: Selected by System option allows system to select the user for checkout.
Allow Selection by User option allows you to select the user for which you want to perform password check-in and check-out function.
Credentials Allowed for Checkout This option allows you to either allow All credentials to perform Check in and Check Out function.
The Restrict Credentials to a Privilege Type option is only applicable if you have already defined privilege type and want to select for which user you want to change the password while check out.