Account states management

Make managed

Bulk account management

1. Mark one or several accounts in the Accounts section and click Make managed.
2. Choose the session policy.
   

3. Confirm the action by clicking Make managed.
   
   

   Bulk account management can be performed only if there is a service connection on those resources or domains whose accounts are selected for management, since a random password will be generated for every account.

   SSH keys are not generated or set with bulk management.

   
   

Account management from its profile

1. Switch to the Accounts section and search for the required account.
2. Open the account profile and click Make managed.
3. Select one of the password setting:

   • Not set
     

     This option is only available if user or service SSH connection is used, as this connection type allows for account storage with SSH key only. If Not set option is selected, then you should set a SSH key for the account.
     

   • Generate random password

   • Set password manually + Change password for resource

     
     

     Options Generate random password or Set password manually + Change password for resource can only be used with service connection. If Set password manually option is selected, and Change password for resource is not, then the account password is changed in the Indeed PAM only.
     

     

4. Select one of the SSH key setting options: :
   

   • Not set
     

     If password is set for the account, then SSH key setting makes Not set option available. If selected, the SSH key setting step can be skipped.
     

   • Generate new SSH key

   • Set SSH key manually + Change SSH key for resource

     Options Generate new SSH key or Set SSH key manually + Change SSH key for resource can only be used with service connection. If Set SSH key manually option is selected, and Change SSH key for resource is not, then the account SSH key is changed in the Indeed PAM only.
     

     

5. Choose the session policy.
   

6. Look through the account parameters again and click Make managed.
   

   If you need to modify the account parameters, simply click Back to return to the required step.

   

Ignoring

Ignored accounts are marked with  symbol in the Account section. Their profiles contain service message that states - Account is ignored.

Bulk account ignoring

1. Mark one or several accounts in the Accounts section and click Ignore.
2. Confirm the action by clicking Ignore again.

Account ignoring from its profile

1. Switch to the Accounts section and search for the required account.
2. Open the Account profile and click Ignore.
3. Confirm the action by clicking Ignore again.

Blocking

Bulk account blocking

1. Mark one or several accounts in the Accounts section and click Block.
2. Confirm the action by clicking Block again.

Account blocking from its profile

1. Switch to the Accounts section and search for the required account.
2. Open the Account profile and click Block.
3. Confirm the action by clicking Block again.

Removing

Bulk account removal

1. Switch to Accounts section and mark one or several accounts.
2. Click Remove. Confirm the action by clicking Remove again.

Account removal from its profile

1. Switch to the Accounts section and search for the required account.
2. Open the Account profile and click Remove.
3. Confirm the action by clicking Remove again.

Restoring

1. Switch to the Accounts section and click Extended search. Файлы
2. Enter the account name and select Removed state.
3. Select the account Location, click Ok, then Search:
   
   • Resources
     To search, enter Resource name or Address (DNS name/IP address) completely or partially.
   • Domains
     To search, enter domain NetBIOS or DNS name completely or partially.
     
     
4. Open the account profile and click Restore.

5. Select the restore point and click Next.
   

   If the Sessions policy that was on the account has been removed, a new sessions policy should be specified after selecting the recovery point.

6. Specify the reset reason and click Rollback.