Discovery of privileged accounts allows an administrator to detect and identify the list of accounts associated to a resource (Target) based on the defined rule. This aids in determining status of an account: managed, active, or inactive. Discovery of privileged accounts also enables administrator to add multiple accounts to a preferred resource. Administrator can transfer and save the unmanaged accounts of a resource to Credential Vault with the onboarding process.
Let us consider, an administrator is required to add 200 accounts to a new resource to secure the resource and manage the associated accounts. Without Discovery capability, administrator has to add a Resource on Credential Vault and include 200 accounts for the resource manually. Manually adding several accounts to a resource is quite time consuming and tedious task.
With Discover and Onboard feature, administrator can add the resource as Target or perform bulk import of all targets. After adding the targets, it is possible to discover associated accounts. Once the accounts are discovered then administrator can onboard all the accounts or the required accounts. It is necessary to onboard the target to Vault first then onboard the respective accounts.
This section includes the following topics: