Creating an alternative account discovery profile

Creating a profile allows you to specify a filter pattern for identifying the alternative accounts in Active Directory. After the profile is created, you can optionally delegate permissions to additional users and roles to manage the profile. See Assigning alternative accounts profile management permissions.

To create an alternative account discovery profile:

  1. Log in the Admin Portal.
  2. Click Discovery > Systems and Accounts > Profiles > Add Discovery Profile button.

    3. The Settings page opens.

  3. Provide the following information on the Settings page:
    1. Enter a Name for the profile.
    2. (Optional) Enter a profile description.
    3. Select Active Directory or Port Scan.
      • For Active Directory:
        1. Select the domains for which you want to discover the alternative accounts.

          2. We search for alternative accounts within the specified domain(s) and Active Directory Organization Units (OUs). We search all the forests that have a Centrify Connector installed (with Active Directory proxy enabled) for the owner accounts.

        2. (Optional) Select the Active Directory groups within your selected domains to discover the alternative accounts.

          The alternative accounts found in a particular domain are filtered by the Active Directory groups that belong to the same domain.

      • For Port Scan:
        1. Fill in the IP Address, Subnet, and Range fields.
        2. Click Add to add new discovery accounts.
  4. Click Save.

We show the newly created profile with the Ready status in addition the following information on the Profiles page.

Field Name Description
Last Run Date and time the profile was run.
Elapsed Time Time it took to run the profile.
Status

Profiles can have the following statuses:

  • Starting –- You have started the discovery process on the profile.
  • Ready –- Profile is configured and ready for discovery.
  • Discovering Accounts -- Alternative accounts are being discovered.
  • Discovering Owners -- Owner accounts are being discovered.
  • Saving -- Saving the results.