15.9 Managing Credentials for Shared Accounts

Privileged Account Manager (PAM) resets the passwords for the shared accounts in the target application or database so that the account is made secure. This is called password check-in and password check-ins are performed in the following ways:

  • User check-in: When a user checks in the password after using it for the specified time and within the allowed time including the grace period.

  • Force check-in: When an administrator forcibly checks in the password. This check-in is helpful when any suspicious activity is detected. To force check-in the password, perform the following:

    1. In the Emergency Access page, click Pending Check-ins.

      Check for the Target system on which the suspicious activity is detected, then click Check-In

  • Auto check-in: When a user has not checked in the password even after the expiry of the specified duration, Privileged Account Manager checks-in the password automatically.

    For more information about auto disconnect feature, refer Disconnecting the Session Automatically.