Overview
The Master Policy enables organizations to permit users to check out a ‘one-time’ password and lock it so that no other users can retrieve it at the same time. After the user has used the password, the user checks the password back into the Vault. This ensures exclusive usage of the privileged account, enabling full control and tracking for the password.
PSM can automatically unlock these exclusive accounts after a PSM session ends.
To allow automatic unlock capability by PSM, it must have unlock permission on accounts safes to release accounts after use. Accounts Safes created in PVWA v11.6 and higher are created with the required permission. to configure existing accounts safes with the required permission use this tool.
This package contains:
1. A script which is designed to set up existing accounts safes with unlock permission for PSM applicative user.
2. ExcludedSafes txt file, to allow excluding safes from being configured with the required permission.