Privileged Account Manager 4.2 Release Notes

Setting Custom Resource Attributes and Filtering Based on Those Attributes

Privileged Account Manager supports a high-level categorization based on resource type, such as, SSH, RDP, database, and so on. With thousands of resources stored in the Credential Vault, more granular resource categorization is required. You can now can use the Extended Attributes feature on resources to save it in different dimensions with any user-defined classification, such as location, application, and usage.

Based on these attributes, filtering and searching for a specific resource also becomes easier. You can also perform the following actions:

• Update Extended Attributes for Single Resource.

• Perform a bulk update on Multiple Resources.

• Filter and search resources based on the defined Extended Attributes.

• Categorize credentials based on privilege levels.

  For more information, see Adding Extended Attributes and Defining Privileged Type for a Credential.

Support for User Selection of Credential During Checkout and Allow User to Set a New Password During Checkin

Users have a variety of credentials and persona for different credentials. For example, in an Active Directory with a large number of resources and credentials, there is no difference between each credential. Now during Credential checkout, you can assign a Privileged Type for a Credential. If an Active Directory has credentials with specific privileged types, while checking out a credential, you can select which role or user credential you want to check out.

You can configure permissions to control the Credential Checkin and Checkout behavior as follows:

• Configure All or Restricted check-out over a set of credentials categorized by the privilege level.

• Configure the Round Robin way of selecting credentials or allow the user to select the credentials during checkout.

• Allow the user to change the credential during credential checkin.

• Select the credential that you want to check out (If the credential is configured by the administrator)

• Change the password of the checked-out credentials (if the credential is configured by the administrator.)

  For more information, see Credential Checkout for Application and Database Type Credentials.

• Password Management:

  Now, Password management functions are moved to the Credential Vault > Password Management tab. For more information, see Password Management.

• My Access:

  • All the Resources for which a user has the permission are listed in the My Access page along with the icons against each resource.

    The Extended Attributes which you have defined are also displayed along with the sessions. For example: If you have defined location and department as extended attributes they are displayed along with the resources.

    For the resources that are listed on the My Access page, there is a search filter provided on the left page for easy facet filtering and filter search.

    The Type field displays the type of resources available. For example: If there are Application and SSH key type resources, the Type field displays these two categories for easy search-ability.

  • New Request tab, used to raise emergency requests, is moved to Requests and Checkouts from the home console of Privileged Account Manager.

    For more information, see Emergency Access Requests.