A credential with least privileges, should be selected as a Default Credential, for each resource added in a Resource Pool. This would help organizations in implementing the least privilege model as per the security recommendations and also minimizes the effort required to select a Credential while creating the access permissions.
To create permissions in Access Control, each Windows Agent must be linked with a Credential Vault, where the Credentials are stored for single sign-on purposes for respective Agents. To link a Windows Agent with a Credential Vault follow the procedure:
Go to Hosts select Windows Agent.
Click Modify Host and select a value for the Vault.
Click Finish.
You can link the following two types of Windows Agents:
Active Directory type Credential Vaults can be used for linking, if the Windows Agent is connected to an Active Directory Domain and to reference only Active Directory accounts in the Agent.
Windows Hosts type Credential Vaults can be used for linking, if the Windows Agent is a stand-alone Windows Host or a Windows Agent which is part of a Domain but also has Local Accounts. To reference both the Local Accounts and Active Directory accounts in the Agent, the Windows Host type vault in Credential Vault should be linked to an Active Directory domain.
These Resources can use a username as Default Credential, which should be typed-in. For example, root or administrators.
These Resources can use any Credential, which belongs to them in the Credential Vault.
These Resources can use any Credential, which belongs to them in the Credential Vault or the linked Active Directory domain.
NOTE:Default credentials are not required for the following resource pools:
Database
Applications
Keys