Skip to main content
Question

Credential management for sudo/root access

  • May 4, 2026
  • 1 reply
  • 30 views

We are currently facing a challenge in securely providing users with sudo/root access. 
Our requirement is to allow users to log in to servers and perform tasks with elevated permissions without retrieving or exposing the root password.

Currently, when users launch a PuTTY session, it does not prompt for additional permissions initially. 
However, once they attempt to execute commands using sudo (the user is LDAP-authenticated with sudo privileges), the system requests a password.

We have enabled password retrieval from  Password Safe. Our concern is that enabling password retrieval for such access would violate our internal security policies. 
We are looking for a secure solution that allows users to perform sudo tasks during the PuTTY session without compromising password security.
 

1 reply

Forum|alt.badge.img+2
  • BeyondTrust Employee
  • May 13, 2026

Hello- This is most easily accomplished by placing the user in the SUDOers file and designating “NOPASSWD” on the TARGET Managed System. This will allow the user to leverage the SUDO command without requiring an additional password input.

Since you are utilizing Password Safe to secure the account credential and also provide an SSH session, you can also utilize Connection Profiles via the Access Policy to restrict commands that are not allowed in those sessions.