Skip to main content
Solved

Is there any Standard role in Password Safe where ALL users should have?

  • August 1, 2025
  • 3 replies
  • 179 views

Forum|alt.badge.img

Is there any Standard role in Password Safe where ALL users should have before accessing the MS?

Best answer by J Glasscock

Higor,

I think it’s important to clarify if you’re asking about the Roles or associated Smart Rule permissions. The Requestor role is needed for all users who will be retrieving a Managed Account credential. Our recommended approach is to use the SAML SSO associated group as the default “catch-all” user group and that group has requestor role access to the dedicated privileged account mapping smart rules so they can access their dedicated privileged accounts. All other managed account access would then be delegated to other groups to allow for role-based access control.

 

Does that help? Let me know if you have any questions,

3 replies

  • BeyondTrust Employee
  • August 1, 2025

Access to PasswordSafe is the default role.  However, there must be an associated Managed Account Smart Group for the user to view the credential.  Access to Managed Systems are assigned via a Managed Account smart rule.  Smart rules are synonymous with Smart Groups.

https://docs.beyondtrust.com/bips/docs/ps-cloud-smart-rules

Hope that helps.


J Glasscock
Forum|alt.badge.img+3
  • Rising Star
  • Answer
  • August 4, 2025

Higor,

I think it’s important to clarify if you’re asking about the Roles or associated Smart Rule permissions. The Requestor role is needed for all users who will be retrieving a Managed Account credential. Our recommended approach is to use the SAML SSO associated group as the default “catch-all” user group and that group has requestor role access to the dedicated privileged account mapping smart rules so they can access their dedicated privileged accounts. All other managed account access would then be delegated to other groups to allow for role-based access control.

 

Does that help? Let me know if you have any questions,


GloriaB
BeyondTrust Employee
  • BeyondTrust Employee
  • August 5, 2025

This kb article has a video in it that with understanding  https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0019919