Skip to main content
Chitta2019
Trailblazer
September 18, 2024
Question

On Demand Access in PasswordSafe

  • September 18, 2024
  • 6 replies
  • 418 views

Sometimes in organization there is requirement of providing access to one user of only server for specific time period only.

How it is possible to automate the process of on demand access using smart rule in Password Safe?

This is the biggest challenge as we have to create a separate managed account, group and smart rule for such access.

I need a process where I can define that after specific time the access is revoked automatically and there is no dependency of password safe administrators. 

6 replies

BeyondTrust Employee
September 19, 2024

Currently OOB Password Safe does not have this feature but this could be achievable with integration of API. Speak to one of your account manager in BeyondTrust on this.

Charles N.
Apprentice
September 19, 2024

The closest option is to create a an approval process workflow. User request access for XX time, an approver receives request via email and approves or denies access. If approved, user gets notification and has approved access for XX time. Example below:

 

C. Newman
Apprentice
September 23, 2024

HI Chittaranjan,

 

Understanding this is a common problem across organisations, BT is comming up with JIT ( Just In Time) Access which could definetly answer your query.

 

reach out to your Sales Manager or Channel Manager for understanding when this feature would be live.

 

Regards

Naveen

Chitta2019
Trailblazer
September 23, 2024

HI Chittaranjan,

 

Understanding this is a common problem across organisations, BT is comming up with JIT ( Just In Time) Access which could definetly answer your query.

 

reach out to your Sales Manager or Channel Manager for understanding when this feature would be live.

 

Regards

Naveen

Thanks Naveen

Chittaranjan Kumar
Rising Star
September 27, 2024

Hi Chittaranjan, 

Dynamic Access or JIT feature mostly be in pipeline of BeyondTrust Password Safe which will help to address your use case but currently it is not available OOTB.

“Entitle” product from BeyondTrust also gives you JIT capability, mostly around IaaS, PaaS, SaaS sides but not sure if that will address your use case or not. 

 

Regards

MJ

 

 

GloriaB
BeyondTrust Employee
BeyondTrust Employee
September 27, 2024

There is Just in Time (JIT) accounts now available in Beyondinsight Password Safe. For more information, review How account setting Disabled at Rest works.