Consider a scenario where the administrator has to provide a privileged access to a specific command such as passwd.
For this scenario, the administrator must perform the following configuration in the command control:
Register the agent to Privileged Access Manager.
Add a command and name it usrun_pwd_cmd with the following field values:
Description: Explain the purpose of this command. For example:
Allows a user to submit a usrun passwd command to change account passwords.
Commands: passwd *
Create a user group usrun_pwd_usrgrp with the following field values:
Description: Explain the purpose of the user group. For example:
Defines the user accounts that can run the usrun passwd command to change account passwords.
Users: Specify the usernames of the users on the Linux and UNIX hosts that have thepermission to use the usrun passwd command.
Add a rule usrun_pwd_rule with the following field values:
Description: Explain the purpose of the rule. For example:
Matches users who submit a usrun passwd command. It authorizes their session and sets the run user to root.
Session Capture: Select On.
Authorize: Select Yes, then select Stop from the drop-down menu.
Run User: Specify root.
Drag and drop the command usrun_pwd_cmd and user group usrun_pwd_usrgrp to the rule usrun_pwd_rule.
After the administrator has configured the authorization rule in Privileged Account Manager, the non-privileged Linux or UNIX user can gain privileged access as following:
Log into the Linux or UNIX system as a non-privileged user.
Execute the command usrun passwd.
You can access the passwd command with elevated access and this user action is recorded and the administrator can view these reports in the admin console.