Consider a scenario where the administrator has to provide privileged access to Windows Agent and the Privileged Account Manager user can access the session from the browser. For this scenario, the administrator must perform the following configuration in Access Control:
Create a Windows or LDAP type Credential Vault resource for the Windows agent and add the respective credentials.
Go to Hosts console (Old Administration Console) and double click on Windows Agent and add the vault created in the previous step to the vault label.
Go to new administration console and click Users and add the users (LDAP or Local) which will be using the resource.
Click Access Control > Users and create a user group and add the users who can access the resource. For more information, see Section 6.2.3, Configuring User Roles.
Click Access Control > Resource Pools and create a resource group and add the Windows Vault for Agent-based Windows Servers. For more information, see Section 6.2.2, Configuring Resource Pools.
Click Access Control > Assignments and create a Web Agent RDP and add the user group and resource pool that you created in steps 2 and 3 to it.
Assign the permissions as relevant.
Click Finish. After the administrator configures the authorization rule in Privileged Account Manager, the Privileged Account Manager user can get access to privileged session using steps 9, 10, and 11.
Log in using the Privileged Account Manager user credentials and click Login.
Click Home > My Access > Predefined Tags > Windows and click the launch icon before the appropriate resource name.
You can administer the live Remote Desktop Protocol Web Relay session as it opens in Home > Active Sessions. The administrator audits the user actions in this privileged session and views these reports in the administration console.