The List of permissions under Database Resource Pools are:
Database Access
Users can access database from any thick client or command line tools, by connecting to the port of Database connector configured in the Resource.
Users are authenticated by the database.
Users from the below User Roles are authorized if specified in the respective Assignments to the Resources:
Local users or LDAP users, if the credentials are checked out.
Agent users, if the credentials are not checked out and an agent is present in the resource where the database client is invoked.
Database users, if the credentials are not checked out and agent is not present.
Database Credentials
Database Credentials
Users need to login into Privileged Account Manager's User Console.
Users are authenticated by authentication sources configured in Privileged Account Manager.
Users can check out the Credentials of authorized Resources from the User Console.
The table highlights the differences of each permissions with respective options and user experience:
|
Permissions |
Authentication |
Secondary Authentication |
Privilege Elevation |
Session Capture |
Mode of Access |
|---|---|---|---|---|---|
|
Database Access |
Database Server |
NA |
No |
Yes |
Thick Client/Command line |
|
Database Credentials |
Privileged Account Manager |
Yes |
NA |
NA |
Web Browser/ REST API |