Is there any Standard role in Password Safe where ALL users should have?

3 replies
198 views

Is there any Standard role in Password Safe where ALL users should have before accessing the MS?

Rising Star

Higor,

I think it’s important to clarify if you’re asking about the Roles or associated Smart Rule permissions. The Requestor role is needed for all users who will be retrieving a Managed Account credential. Our recommended approach is to use the SAML SSO associated group as the default “catch-all” user group and that group has requestor role access to the dedicated privileged account mapping smart rules so they can access their dedicated privileged accounts. All other managed account access would then be delegated to other groups to allow for role-based access control.

Does that help? Let me know if you have any questions,

G

Garfield

BeyondTrust Employee

Access to PasswordSafe is the default role. However, there must be an associated Managed Account Smart Group for the user to view the credential. Access to Managed Systems are assigned via a Managed Account smart rule. Smart rules are synonymous with Smart Groups.

https://docs.beyondtrust.com/bips/docs/ps-cloud-smart-rules

Hope that helps.

J GlasscockAnswer

Rising Star

Higor,

I think it’s important to clarify if you’re asking about the Roles or associated Smart Rule permissions. The Requestor role is needed for all users who will be retrieving a Managed Account credential. Our recommended approach is to use the SAML SSO associated group as the default “catch-all” user group and that group has requestor role access to the dedicated privileged account mapping smart rules so they can access their dedicated privileged accounts. All other managed account access would then be delegated to other groups to allow for role-based access control.

Does that help? Let me know if you have any questions,