Consider a scenario where the administrator has to provide privileged access to Windows system and the Privileged Account Manager user can access the session from the browser. For this scenario, the administrator must perform the following configuration in Access Control:
Create a Windows or LDAP type Credential Vault resource for the Windows system and add the respective credentials.
Click Users and add the users (LDAP or Local) which will be using the resource.
Click Access Control > User Roles and create a user group and add the users who can access the resource.
Click Access Control > Resource Pools and create a resource group and add the Windows Vault for Agentless Windows Servers
Click Access Control > Assignments and create an RDP Web and add the user group and resource pool that you created in steps 2 and 3 to it.
Assign the permissions as relevant.
Click Finish.
After the administrator configures the authorization rule in Privileged Account Manager, the Privileged Account Manager user can gain privileged session as follows:
Log in using the Privileged Account Manager user credentials and click Login.
Click Home > My Access > Predefined Tags > Windows and click the launch icon before the appropriate resource name.
You can administer the live Remote Desktop Protocol Web Relay session as it opens in Home > Active Sessions. The administrator audits the user actions in this privileged session and views these reports in the administration console.
The administrator audits the user actions in this privileged session and views these reports in the administration console.