Emergency access request is a request to access a resource for a limited time period. You can create an emergency access request in the following scenarios:
When you do not have access to the resource.
When you have access to the resource, but it is not active because the access is granted only for a specific time interval. For example, you are granted access to a Windows server from 10.00 a.m. to 5.00 p.m. After 5.p.m. though it is displayed in the user console, you cannot access the resource. In this scenario, you can create a request.
You can create an emergency access request for any type of resource except shared keys.
When you create a request,
The request is sent to the administrator and it is approved or denied based on the administrator’s discretion.
You can view the pending requests at Home > My Access > Predefined Tags > Emergency Access > Pending.
When the request is approved, you are authorized to access the respective resource.
After approval, you can access the request from Home > My Access > Predefined Tags > Emergency Accesses > Approved.
When the request is denied or revoked by the administrator, you will receive an alert. You can click the Bell icon on the top-right corner of the page to view the alerts.
To create an emergency access request, perform the following:
Click My Access > New Request.
Select the Target you want to access.
Based on the selected target configure the following:
|
Target |
Fields |
|---|---|
|
Windows |
Connection Type: Select SSO when you need privileged single sign on access to Windows. When you select this option you get single sign on access through Privileged Account Manager proxy as well as Privileged Account Manager credential provider. Select Direct Access when you want to access the Windows directly using the server credentials. |
|
SSH/Telnet |
Connection Type: Select SSH or Telnet based on the connection method the target system supports. Enable X11: Select this option to get X11 application access through SSH. |
|
Database |
Database: Select the database you want to access. Password Checkout: Select this option to check out credentials to access the database. Database Access: Select this option when you know the credentials to access the database but you need access to the database through Privileged Account Manager proxy. |
|
Privileged Shell |
Choose this option to get elevated access to the UNIX/Linux workstation using your local credentials. |
|
Application SSO |
Application: Select the application or computer you want to access. |
|
Application Credential |
Application: Select the application for which you want to get the credentials. |
|
SSH Web Access |
Connection Type: Select SSH or Telnet based on the connection method the target system supports. All the current running sessions can be seen in Active Sessions. |
|
Windows Web Access |
Connection Type: Select the Windows resource you want to access. All the current running sessions can be seen in Active Sessions. |
Specify the following details common to all the target resources:
Hostname/IP Address: Specify the hostname or IP address of the target resource which you want to access, wherever applicable.
Access As: Select Normal User when you want access to the resource without any privileges. Select Super User when you want privileged access to the resource.
Access Duration: Specify how long you want access to the resource.
Email: Specify the email address for receiving notification about the status of the request.
Reason: Specify the reason for this request.
Click Create.
When the request is created, an email notification is sent to you. Whenever the state of the request changes, you will receive a notification in the user console and also through an email.