Resource editing

The function allows you to change the Resource Name, Description, Policy, User or Service Connection.

• Click Image Removed Image Added in the resource profile to the right of the required parameter.

Adding an account

The function allows adding local resource accounts to Indeed PAM, which can be used to provide access to the resource.

• Click Add account in Resource Profile.
• Enter an Account Name and Description.

Password and SSH Key

If a service connection of the SSH type is configured for the resource, then when adding an account, it will be possible to generate or manually add not only a password, but also an SSH key. Also, for such accounts it is possible not to set a password, the setup wizard will display an additional item when setting a password - Not set. Below we will consider an example of adding *nix account. When adding Windows OS and DBMS accounts, the Not set item will be missing when setting up a password, and there will be no page for generating or manually installing an SSH key.

Password settings

• Select Not set, Generate random password, or Set password manually
• Enter a password or continue by selecting Not set or Generate random password
  Image RemovedImage Added
  

SSH Key settings

• Select Not set, Generate new SSH key, or Set SSH key manually.
• Select the SSH key file and enter its password, or continue by selecting Not set or Generate new SSH key.
  Image RemovedImage Added

Session policy selection

• Select a session policy.
• Finish adding your account.

Checking the connection to the resource

The function allows you to check the network availability of the resource, the correctness of the address, name and password of the service account.

• Click Check connection in the resource profile

Synchronization

The function allows you to get the correct resource name, OS or DBMS version, local resource accounts and security groups they belong to. Synchronization is available only for resources with a configured service connection, otherwise the Synchronization function will not be present in the resource profile.

• Click Sync on the resource profile

  Note
  icon false
  Accounts that have been added to Indeed PAM using the Synchronize function will be marked with a  symbol. To continue working with them, you will need to provide the system with their password, or reset it to a random value. A detailed description of the account verification process is described in the article.

  
  

Block

The function allows you to suspend all permissions that use the resource.

• Click Block in the resource profile

  Note
  icon false
  The resource will be marked with a  symbol. All permissions in which the resource is a contributor will be marked with a  symbol.

  
  

Remove/Rollback a resource

Removing a resource

• Click Remove on the resource profile

  Note
  icon false
  Before deleting a resource, you must delete all accounts that were added from the deleted resource

  
  

Rolling back resources

• Click Extended search in the Resources section
• Enter the Resource name or Address (DNS name/IP address) in whole or in part
• Select Removed for the State field and click Search
• Open the resource profile and click Rollback
• Enter the reason for the recovery and click Rollback