Usage Scenario for Agentless Secure Shell Web Relay

Consider a scenario where the administrator has to provide privileged access to Linux or UNIX system and the Privileged Account Manager user can access the session from the same browser itself. For this scenario, the administrator must perform the following configuration in the Access Control.

  1. Create an SSH type Credential Vault resource for the Linux or UNIX system and add the respective credentials.

  2. Click Users, add the users (LDAP or Local) which will be using the resource.

  3. Click Access Control > User Roles and create a user group and all the users which will use the resource.

  4. Click Access Control > Resource Pools and create a resource group. Add the SSH Vault for Agentless SSH Servers.

  5. Click Access Control > Assignment and create SSH Web and add the user group and resource pool you created in the 2 and 3 step to it.

  6. Select the permissions you want to give.

  7. Click Finish.

After the administrator configures the authorization rule in Privileged Account Manager, the user can gain privileged session as follows:

  1. Log in using the Privileged Account Manager user credentials and click Login.

  2. Click Home > My Access > Predefined Tags > SSH/Telnet and click the launch icon before the appropriate resource name.

  3. You can administer the live SSH Web Relay session as it opens in Home > Active Sessions. The administrator audits the user actions in this privileged session and views these reports in the administration console.

The administrator audits the user actions in this privileged session and views these reports in the administration console.