Adding a Rule

  1. On the home page, click Credential Vault > Discover & Onboard > Configuration.

  2. Click Add.

    The Add Rule window appears.

  3. Specify name of the rule in Name.

  4. Select the resource type for which the rule is applicable in Type.

  5. Specify Description.

  6. Configure the condition or parameter that detects or identifies accounts in Rule. So, the accounts that match conditions of the rule gets filtered and displayed.

    • For Windows, the rule syntax is as follows:

      {"priv_def":{"groups": ["groups-name"],"services": ["list-of-services"],"privileges": ["privilege-type"],"rights": ["logon-rights"]}}

      For example, rule with valid values is as follows:

      {"priv_def":{"groups":["Backup Operator","Administrators","Sample Pam"],"services":["Scheduler","CryptSvc"],"privileges":["SeBackupPrivilege","SeAuditPrivilege"],"rights":["SeBatchLogonRight","SeServiceLogonRight"]}}

    • For SSH, the rule syntax is as follows:

      {"priv_def":{"user_id": ["value"],"groups": ["group-name"],"sudo_policy": ["policy-name"]}}

      For example, rule with valid values is as follows:

      {"priv_def":{"groups": ["Administrators","Power Users"],"services": ["COMSysApp","EventSystem","MyService"],"privileges": ["SeBackupPrivilege","SeAuditPrivilege","SeCreatePagefilePrivilege"],"rights": ["SeServiceLogonRight"]}}

    NOTE:You can customize the group name, services and privileges as per your requirement.

  7. Click Add.