2.5 Applications, Shared Keys, and Cloud Services

For accessing resources such as, applications, shared keys, and cloud services, you must check out the credentials from the user console and use the appropriate client to access the resource. You can use these credentials until the access duration expires.

You can perform credential check out for the following:

  • Shared Keys: Key for any application, such as license key to install an application.

  • Applications: Credentials to access any application. The application can be LDAP, eDirectory, ESXi Server, SAP, Linux, AIX and Windows.

  • Cloud Services: Credentials to access cloud platforms such as, AWS, Openstack and Microsoft Azure.

You can also generate API tokens for checking out and checking in the credentials through REST API. For more information about API tokens, see Managing API Tokens.

The following sections explain the credential check in and check out process in detail:

2.5.1 Checking Out Credentials

When you check out the credentials, the credentials are valid only for the requested access duration. To access the resource after the access duration expiry, you must check out the credentials again if it is an access granted through Privileged Account Manager policy. If it is an emergency access, you must create a new request. For shared keys, there is no expiry.

To check out the credentials, perform the following:

  1. Select the appropriate resource type such as database, application, cloud services, and so on.

  2. You can check out the credentials by clicking either of the following:

    • Resource Name: Allows you to add notes before checking out the resource credentials.

    • The icon: Allows you to check out the resource credentials without adding notes.

  3. Specify the access duration, email address, and reason for credential check out.

  4. Click Check Out.

  5. The credentials are visible only for 10 seconds. After 10 seconds, click Show Credentials to view the credentials.

    You can also copy the password by clicking Copy to Clipboard.

After you check out the credentials, the resources for which the credential is checked out can be viewed from Home > Checked Outs.

2.5.2 Checking In Credentials

You must check in the checked out credentials after the access duration expiry for Privileged Account Manager to reset the credentials. If you do not check in the credentials, Privileged Account Manager automatically checks in the credentials. After every check in, Privileged Account Manager resets the credentials for all resource types except shared keys.

To check in the credentials quickly, click of the appropriate resource. If you want to view the credentials before checking in, perform the following:

  1. Click the appropriate resource name.

  2. Click Show Credentials and complete the authentication process to view the credentials.

  3. Click Check In.

2.5.3 Viewing Credential Checkout History

Go to Home > Checkouts to view the history and current status of credential checkouts.