Centrify lets you securely store user name and password combinations in the Privileged Access Service for local accounts. You can use those accounts to log on securely to the servers, switches, and routers you identify as Systems, Domains, and Databases.
In addition, you can check out passwords for Centrify-managed local administrator accounts for registered devices. You can either show the password or copy it to the clipboard, then use it to perform operations that require admin rights.
Checking out an account password requires the following:
- Appropriate administrative rights on the Centrify identity platform.
- Existing access to Centrify privilege service (for Systems accounts).
- The device must be registered in the Privileged Access Service.
- Your authentication mechanisms must be configured for the Centrify application—see Securing your Centrify application.
Account types you can check out
The following are account types you can check out passwords for:
- Tap Systems on the Centrify application to see available systems and check out the password for a stored account.
- Tap Domains on the Centrify application to see available domains and check out the password for a stored domain.
- Tap Databases on the Centrify application to see available domains and check out the password for domains.
Note: You need view and checkout permission to check out a system, domain, or database password.
When you check out a password, it remains checked out until either you check it back in or the checkout time expires. The maximum check out time is configured by your admin through policy; however, you can extend the checkout time for a password that is currently checked out. When you extend the time, it is reset to the maximum check out time.
Checking out a password
For detailed steps on how to check out a password, see Checking out account passwords. You can view these operations in the activity stream of the resource in portal. To do this: navigate to a resource, select the resource and choose the Activity tab.