Skip to main content
Question

On Demand Access in PasswordSafe

  • September 18, 2024
  • 6 replies
  • 360 views

Chitta2019
Forum|alt.badge.img+3

Sometimes in organization there is requirement of providing access to one user of only server for specific time period only.

How it is possible to automate the process of on demand access using smart rule in Password Safe?

This is the biggest challenge as we have to create a separate managed account, group and smart rule for such access.

I need a process where I can define that after specific time the access is revoked automatically and there is no dependency of password safe administrators. 

6 replies

  • BeyondTrust Employee
  • September 19, 2024

Currently OOB Password Safe does not have this feature but this could be achievable with integration of API. Speak to one of your account manager in BeyondTrust on this.


Charles N.
Forum|alt.badge.img+1
  • Apprentice
  • September 19, 2024

The closest option is to create a an approval process workflow. User request access for XX time, an approver receives request via email and approves or denies access. If approved, user gets notification and has approved access for XX time. Example below:

 


Forum|alt.badge.img+5
  • Apprentice
  • September 23, 2024

HI Chittaranjan,

 

Understanding this is a common problem across organisations, BT is comming up with JIT ( Just In Time) Access which could definetly answer your query.

 

reach out to your Sales Manager or Channel Manager for understanding when this feature would be live.

 

Regards

Naveen


Chitta2019
Forum|alt.badge.img+3
  • Author
  • Trailblazer
  • September 23, 2024

HI Chittaranjan,

 

Understanding this is a common problem across organisations, BT is comming up with JIT ( Just In Time) Access which could definetly answer your query.

 

reach out to your Sales Manager or Channel Manager for understanding when this feature would be live.

 

Regards

Naveen

Thanks Naveen


Forum|alt.badge.img+3
  • Rising Star
  • September 27, 2024

Hi Chittaranjan, 

Dynamic Access or JIT feature mostly be in pipeline of BeyondTrust Password Safe which will help to address your use case but currently it is not available OOTB.

“Entitle” product from BeyondTrust also gives you JIT capability, mostly around IaaS, PaaS, SaaS sides but not sure if that will address your use case or not. 

 

Regards

MJ

 

 


GloriaB
BeyondTrust Employee
  • BeyondTrust Employee
  • September 27, 2024

There is Just in Time (JIT) accounts now available in Beyondinsight Password Safe. For more information, review How account setting Disabled at Rest works.