General

When configuring the functional account for rotating passwords in Azure, the secret used for the functional account will need to be manually rotated periodically.We would like to ask for an enhancement where the rotation of the secret can be performed automatically by Password Safe. Regards,Rayapudi Durga Prasad.

Hello,It would be nice to have an option to distinguish separate role for Reporting only with possibility to generate reports for password safe activity (for particular smart groups) as currently it is necessary to assign "Auditor" role to achieve this but Auditor role at the same time provides access to session recordings and it's not possible to create role such Reporting Analyst with access to reports but no access to recorded sessions.What do you think about it?Regards

Hello,What do you think about the idea that the instance name or source id be included in every single BI log. This to be able to filter the logs by instance name in the SIEM in a easier way. At this moment there are logs that where the instance name or source are not being listed on the payload.Cheers 

Hi All,We've observed that managed accounts originating from Azure Active Directory do not appear to synchronise their description field. Consequently, users encounter inconvenience as they cannot readily identify which account to use due to the absence of the description.Is it possible for BeyondTrust to automatically consider the "jobTitle" attribute in Azure AD as the account as description Regards,Rayapudi Durga Prasad

Hi All,How can we increase the password change timeout for a platform?We noticed that our firewall devices password change commit job is taking longer time before Password Safe timeout the password change. Would like to know is there any option to increase the timeout value. until the firewall device completes password change commit.  Thanks,

Hi Experts, I’m trying to find if there are any APIs available to initiate an adhoc discovery scan to specific set of systems? I failed to find any discovery APIs.Also, how does other customers are handling (discover & onboard) the newly created servers in day to day?Periodicity of discovery? Daily/Weekly? And if weekly then how do you handle the new systems? Please share your thoughts on this :) Regards,Varun

Smart Rule configuration Use Case based on the Onboarding of Assets by Discovery Date and Platform. Value of X can be defined by day, week, 30 days for example. Pre-configured relevant Functional Account and Password Policy applied based on related Platform. 

Hey community,Has anyone else encountered challenges with managing multiple tiers in Password Safe Cloud due to the limitation of a single functional account for rotating passwords? Please check out the idea Ability to have more than one funtional | All Product Ideas - Public and vote for it if you think it would be helpful for your use case!Cheers,Bartosz

Idea is to provide ability to resolve a full name of Access Policy as current configuration doesn't provide such functionality.Suggested solution: Allow to resolve full name after pointing mouse cursor on Access Policy. Related issue description:During selection of Access Policy for particular Smart Rule it's not possible to resolve a full name of Access Policy, there's character limitation of what is displayed, it cuts name with "..." and the rest is not visible. The problem is with Access Policies which have long names, their first part looks the same and only difference is for example L1 / L2 at the end - issue is that this part is not visible, usually in such situation name should be resolved after pointing mouse at the name of the policy but it's not happening in that case. In such situation it's not possible to make sure which policy we're selecting, we have to select policy blindly and after that check which one has been selected and assigned to sm

Getting error code 1219 error.During troubleshooting. I see no connection details from PAM resource broker to Target serverused `net use` commandDoes the BT in the background execute  `net use /delete \\server\share`  once the RDP session is closed from PAM.Require the troubleshooting steps in detail for 1219 error. 

We propose adding configuration export and Import functionality to the Cloud PasswordSafe Console, allowing administrators to export configurations via API or directly from the PAM cloud console interface. This enhancement aims to enhance flexibility, streamline backup processes, and integrate seamlessly with our existing systems.Exporting configurations ensures operational continuity by maintaining backup settings.API-based configuration exports facilitate integration with our IT infrastructure and automate configuration management.

Is there anyway, using PWS, to require a 2nd factor of authentication when using RDP to connect to a set of servers from PWS?

Hello All,The AD fallback authentication mechanism is an essential feature for ensuring continuous access to resources, even when the primary authentication method (Kerberos) fails.I kindly ask you to create an official article that would explain in detail how the AD Fallback authentication mechanism works. Regards,Raja

The following articles were published last week. New Knowledge Base Articles: KB0021413 - How to create or customize email notifications KB0022015 - How to restrict users from viewing passwords when Password Safe and PRA are integrated KB0022136 - Scanner reporting Windows 2025 server as Windows server 2125

Hello community,I am working on creating a custom platform to model a Radaware Alteon Load Balancer platform. I already have all the necessary commands to perform the test and change the password; however, I am encountering an issue. The password change command used ( /c/sys/access/user/uid /pswd ) requires a UID instead of the managed user name. In traditional BeyondInsight/Passwordsafe SSH platforms, only the options for username and password are available, and there are no other alternatives such as UID.I would like to know if anyone has faced this challenge before, so they could guide me on how they were able to resolve it, or if they can provide any suggestions on how to perform the password change for this platform.Thank you in advance for your help.Best regards.

Hello All, We are planning for Beyond Trust Insight upgrade from older version of 23.2 to 24.X. Can someone help with stepwise documentation or any documents for this upgrade. What all preliminary activities needs to be done before upgrade and post upgrade activities? Thanks,Prasad

Hi Team,I have a query regarding web console login: "Can we use the same user account for both Web Console login and Server RDP (MA) login? If we do, what would be the potential impact?"I would appreciate a quick response on this matter.Thanks!

We are facing this error when trying to export the logs from appliance page. This KB is suggesting to restart the appliance monitoring service. I would like to know the impact of this service restart on production environment. Kindly suggest on it.

We recently rebooted the primary UVM server and since then the daily scans for discovering domain join servers are not working which is scheduled daily at night. Please suggest. 

HI Team, Could you please provide any one of here, pre-requisites for password safe cloud and SaaS based solution. To configure from scratch.

Hi Team,We are on a version 24.2.0, When I try to launch the ps_automate session from the cmd line, I’m getting the below prompt about msedgedriver but actual MS Edge Browser is not launched, but if you look into the log file, it shows that session has been started.ps_automate.exe ini="D:\Enhanced Session Utility\PS Automate\BIWebApp.ini" TargetURL="https://xxxxx.ps.beyondtrustcloud.com/WebConsole/index.html#!/dashboard" BrowserName="msedge" username=xxx password=xxxPlease check the below reply for detailed log. 

How to launch browser - without being in INCOGNITO or inprivate via ps automate ?

The following articles were published last week. New Knowledge Base Articles: KB0021664 - Login and Login Alert Cumulative mail templates are not sending any notifications KB0022091 - Unable to view active and completed sessions. Error - An error occurred while trying to fetch the session details KB0022111 - BeyondTrust Connector services failing consistently. Error -

Hi Team, I have a requirement to create a custom platform where with the below steps..1.Open putty enter hostname name 2.Enter username3.Accept Banner4.Enter Password As per the current Custom Platform we can only have 2 Groups in Steps1.After Login2.Error Handling And as per my understanding my requirement needs a before login Group. Let me know if anyone of you have got same case and by any chance you got it working or what could be the alternate ways.

Hello All,How do you handle use cases where admins need to manually enter the managed account password multiple times in a day. These can be Workstation admins helping end-users directly on end-user workstations and manual entry of passwords is required . As the password rotates very frequently and is complex to remember or type in what is your approach .We have a password manager that they can use on phone , so that they don’t need to carry their laptop or login to PS on end-user machine. We are exploring using Yubikeys or other device which can store partial password and admins can memorize a few characters. Yubikeys don’t allow to restrict storage based on number of characters  though,.