5.0 Creating an Emergency Access Request

Emergency access request is a request to access a resource for a limited time period. You can create an emergency access request in the following scenarios:

  • When you do not have access to the resource.

  • When you have access to the resource, but it is not active because the access is granted only for a specific time interval. For example, you are granted access to a Windows server from 10.00 a.m. to 5.00 p.m. After 5.p.m. though it is displayed in the user console, you cannot access the resource. In this scenario, you can create a request.

You can create an emergency access request for any type of resource except shared keys.

When you create a request,

  1. The request is sent to the administrator and it is approved or denied based on the administrator’s discretion.

    You can view the pending requests at > My Access > Requests > Pending.

  2. When the request is approved, you are authorized to access the respective resource.

    After approval, you can access the request from > My Access > Requests > Approved.

  3. When the request is denied or revoked by the administrator, you will receive an alert. You can click the Bell icon on the top-right corner of the page to view the alerts.

To create an emergency access request, perform the following:

  1. Click My Access > Requests > New Request from the page of Privileged Access Manager.

  2. Select the Resource you want to access.

  3. Based on the selected target configure the following:

    Target

    Fields

    Windows

    Connection Type:

    Select SSO when you need privileged single sign on access to Windows. When you select this option you get single sign on access through Privileged Access Manager proxy as well as Privileged Access Manager credential provider.

    Select Direct Access when you want to access the Windows directly using the server credentials.

    Windows Web Access

    Connection Type: Select the application or computer you want to access.

    Select Web Access when you want to access the Windows directly using the server credentials.

    Select > Active Sessions to view the active sessions.

    SSH/Telnet

    Connection Type: Select SSH or Telnet based on the connection method the target system supports.

    Enable X11: Select this option to get X11 application access through SSH.

    SSH Web Access

    Connection Type: Select SSH or Telnet based on the connection method the target system supports.

    Select > Active Sessions to view the active session.

    Privileged Shell

    Choose this option to get elevated access to the UNIX/Linux workstation using your local credentials.

    Database

    Database: Select the database you want to access.

    Password Checkout: Select this option to check out credentials to access the database.

    Database Access: Select this option when you know the credentials to access the database but you need access to the database through Privileged Access Manager proxy.

    Application SSO

    Application: Select the application or computer you want to access.

    Application SSO Web Access

    Connection Type: Select the application or computer you want to access.

    Select Web Access when you want to access the Windows directly using the server credentials.

    Select > Active Sessions to access the active session.

    Application Credential

    Application: Select the application for which you want to get the credentials.

  4. Specify the following details common to all the target resources:

    Resource/IP Address: Specify the hostname or IP address of the target resource which you want to access, wherever applicable.

    Access As: Select Normal User when you want access to the resource without any privileges. Select Super User when you want privileged access to the resource.

    Access Duration: Specify how long you want access to the resource.

    Email: Specify the email address for receiving notification about the status of the request.

    Reason: Specify the reason for this request.

  5. Click Create.

    When the request is created, an email notification is sent to you. Whenever the state of the request changes, you will receive a notification in the user console and also through an email.