You can allow a framework user group or all privileged users to have privileged access without prompting for secondary authentication. To allow this access, Privileged Account Manager provides the Bypass Secondary Authentication option.
This option is helpful for framework users in the following scenario:
In case of some emergency, Privileged Account Manager administrators can log in to Privileged Account Manager Administration console without being asked for secondary authentication. This can happen only if the administrator is in a user group that has the option enabled. To enable this option for a user group refer, Section 5.2.7, Enabling Advanced Authentication for Privileged Access. The users who may require to be a part of the same group are:
Identity Manager users using the driver for Privileged Account Manager
Any other users who perform Privileged Account Manager administrative activities through automation.
This option is also available as a global setting where you can bypass secondary authentication on the parent rule. This is helpful so that in case of emergency such as when Advanced Authentication server is down, you can enforce bypassing secondary authentication for all the rules. To enforce this global rule perform the following procedure:
On the home page of the administration console, click Settings > Server Settings > Authentication.
In the details pane, move the Secondary Authentication Setting slider to the right.