Jump to content
Guest Kevin

Privileged Account Management

Recommended Posts

Guest Kevin

Hello, I am wondering how Passwordstate can be used as an Privileged Account Management solution, as which it is advertised.

What features would be used in what way, for example can you request access to the password of a privileged account and use that for a certain time until it expires.

What would be some best practices to keep in mind when using password state?

 

Kind regards,

Share this post


Link to post
Share on other sites

To write about every feature in that makes it a PAM solution would be akin to writing a thousand page essay.

I think the better option would be if you could tell us what you are after in a PAM and what you're after Passwordstate to do?

There's a good chance it does it.

 

4 hours ago, Guest Kevin said:

can you request access to the password of a privileged account and use that for a certain time until it expires

Yes.

Share this post


Link to post
Share on other sites

Hi Kevin,

 

The checkout feature is in the standard product, as well as the two Remote Session Launchers we have.

 

The Password Reset Portal is a self service portal for users to reset the Active Directory password if they forget it - saving you on Help Desk calls.

Regards

Click Studios

Share this post


Link to post
Share on other sites
14 minutes ago, support said:

The checkout feature is in the standard product, as well as the two Remote Session Launchers we have.

 

Ditto for the "handshake" feature, where you will need approval from another person to access a password.

 

To sum it all up, I suggest you simply start reading here and work your way out from there.

 

Share this post


Link to post
Share on other sites

Hello,

If you have a look at the main Passwords menu, you will see 'Request Access to Passwords'. This is what customers now use for approval to passwords, and as per the screenshot below. you can specify a Password List needs more than one approver if required. The advantage of this is that both approvers do not need to be online at the same time to approve/deny.

 

Snag_1a758194.png

Regards

Click Studios

Share this post


Link to post
Share on other sites

OK, it wasn't clear to me if that option then enabled approval for the whole list, or if there was another setting that needed to be enabled first and that just controlled the number of approvers. And to confirm, that setting is for all passwords in the list, you can't set it per-password?

Share this post


Link to post
Share on other sites

Hello jandrewartha,

Just like the previous feature for Handshake approval, this is a per Password List setting - so it applies to all records in the list. We thought we would keep it consistent with how the Handshake approval option worked. Any of those settings you see in my screenshot above, is for all records in the Password List.

Regards

Click Studios

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...