For systems that are joined to Active Directory and where you have installed the Centrify Client for Windows, you can run an application using Active Directory alternate accounts without having to checkout the password in Centrify PAS.
You'll need to have first discovered the alternate accounts for your users. For details, see Discovering alternative accounts.
Note: The alternate account should not have any MFA settings. If the alternate account does have MFA options assigned, the operation to run the application with that account will fail.
Also, if you're looking for information about enabling alternate account support on systems that have the Centrify Agent for Windows installed, see Enabling users to run applications with alternate accounts.
To run an application with an alternate account:
On a Windows system, right-click the desired application and choose Run as Administrator.
In the dialog box that opens, select the Use My Alternate Account option and click Yes to continue.
When prompted, enter your Active Directory credentials to authenticate your account and click Yes to continue.
How the authentication profile is configured for your account determines what kind of authentication credentials you need to enter.
If you have more than one alternate account, select the desired account to use and click Yes to continue.
If your alternate account has administrative privileges, the application runs under this alternate account (with elevated administrative privileges).