Propagation Action Use Case

Question

Hello Everyone,We are trying to implement Propagation action for one of the managed accounts. The requirement here is that - “Whenever password for this account changes, it shall run a powershell script on corresponding managed system and update the password”.Since we are new to use of ‘propagation action’ functionality any document which can help to understand the usage will be useful.  Thanks,Prasad

Neil · Accepted Answer

​@prasadp87I don’t believe there is a separate Linux propagation guide. The Windows Propagation Service (local agent over ADMIN$/TCP 445) is Windows-only and doesn't apply to Unix/Linux or SSH script actions. For Linux, you can create a propagation action that runs a Unix Shell script. In the docs linked earlier see the section "Create custom propagation action to run a script".Configuration → Privileged Access Management →Propagation Actions →+ Create Propagation ActionSet the Action Type to Run Unix Shell Script andprovide the full path to the script. Add command-line parameters as needed (e.g. %p).One important note: Password Safe does not deploy the script, so it must already exist on the target managed systems.And yep, propagation actions apply to Password Safe on-prem. The link above is the on-prem documentation, and the steps are effectively the same for cloud. The only Windows-target difference is that for on-prem, the Propagation Service connects via the appliance (whereas cloud PS deployments will useResource Brokers).

Neil · Answer

Hey ​@prasadp87, here are some helpful guides which will help you get started with Propagation Actions:(Admin guide):Add propagation actions to managed accounts(KB0018171):Password Safe Propagation Service overview - How to manage service accounts, scheduled tasks, IIS App Pools & more.(KB0019099):PowerShell and batch file Propagation Action examples

Propagation Action Use Case

3 replies

Badge Earners

Badge Earners

Sign up

Login to the community