5.0 Working with Credentials

Privileged Account Manager stores credentials of privilege accounts, such as administrator accounts, to a secure central repository (vault). After the privileged credential is added to the vault, the users needs to access their credentials through Privileged Account Manager. They get authenticated before checking out the privileged credentials, and their access is logged. After a user checks in the credential, it is reset to ensure that users cannot reuse it the next time and must check it out through Privileged Account Manager when they require the credential. Keeping privileged credentials in a secure and centralized vault enables you to perform the following tasks:

  • Strongly protect the credentials

  • Limit who has access to the credentials

  • Track any unusual activity

Privileged Account Manager supports the following vault types:

  • Application configuration: Configuration for application credential checkout and application SSO.

  • Database: Configuration for database credential checkout.

  • Keys: Configuration for Windows license keys SSH, or host keys.

  • LDAP/Active Directory Configuration for all the directory servers.

  • UNIX/LINUX/Network Configuration for Linux, Unix, network device configuration.

  • Windows: Configuration for a Windows machine that is not part of any directory services.

Click Privileged Account Manager > Credential Vault to view all the vaults configured. Each vault provides a preview of the resources and credentials stored within.