Adding a resource

To manage the resource local accounts and to provide for access to resource to directory users, you have to add a new resource to the Indeed PAM.

  1. Switch to Resources section and click Add.

  2. Fill in the Resource name and Description fields.

    For Windows resources, you shold specify the real computer name, as it is used to start a session.

  3. Configure User connection:
    Configuration of user connection with RDP or SSH type:
    • Select the Connection type - RDP or SSH

    • Specify the Address (DNS address/IP address)

      If non-standard port is used for RDP or SSH connections, then it must be specified in the Port field.

    • If you need to open a terminal session with the /admin option, check the box "Run as administrator"

    Configuration of user connection with web type:

    • Select the Connection type  - web.

    This connection type is missing in the list by default. The procedure of creating and configuring a new connection type is detailed in the Configuration section.

    • Specify the web application URL and login page URL.

  4. Configure Service connection.

  5. Activate the Use connector for service connection.

    If you plan to use a local account of the resource as the service one, then this setting can be skipped. You can return to it after an account for the resource is added. If an Active Directory domain is added to Indeed PAM, then you can use a domain account as service one.

    1. Configuration of service connection with Windows type:

      • Select Connector - Windows.
      • Specify the Address (DNS name/IP address)

    2. Configuration of service connection with SSH type:
      • Select Connector - SSH.

      • Select the connection template.

        There are no templates for SSH service connection by default. The procedure of creating and configuring a new connection type is detailed in Configuration section.

      • Specify the Address (DNS name/IP address)

        If non-standard port is used for SSH connections, then it must be specified in the Port field.


    3. Configuration of service connection with the Microsoft SQL Server database type:
      • Select Connector - Microsoft SQL Server

      • Specify the Address (DNS name/IP address)

        If Microsoft SQL Server is in a domain, you can use both domain and integrated accounts as a service account.
        If Microsoft SQL Server is located outside the domain, only integrated SQL Server accounts can be used as a service host.

        Only integrated SQL Server accounts are synchronized.

    4. Configuration of service connection with the Oracle database type:
      • Select Connector - Oracle Database

      • Specify the Address (DNS name/IP address)

        To use the Resource Connection service account, you must be able to log in with the SYSDBA privilege, and to verify the password of other accounts, you need the CONNECT privilege. Use the following commands to apply privileges:

        GRANT CONNECT TO username;
GRANT SYSDBA TO username;

    5. Configuration of service connection with the PostgreSQL Pro database type:
      • Select Connector - PostgreSQL

      • Specify the Address (DNS name/IP address)

      • Specify the Port
    6. Configuration of service connection with the MySQL database type:
      • Select Connector - MySQL

      • Specify the Address (DNS name/IP address)

      • Specify the Port

        After creating a service connection, the host name must be entered in the properties of the MySQL service account.

  6. Select the service account. To find the account enter Account name completely or partially.
  7. Select the account policy.

  8. Look through the resource parameters again and click Create.

    If you need to modify the resource parameters, simply click Back to return to the required step.

Search for resources

Search is performed in the Resources section.

Textual search

To find the resource, enter Resource name or Address (DNS address/IP address) to the search string completely or partially.

Extended search

Click Advanced search and enter one or several criteria - Resource name or Address - to the search string completely or partially.
Select the resource status:

  • Blocked

  • Removed

  • Ready

Check of connection to resource

The connection check allows to determine whether the resource is available in the network, as well as whether the address, account name and password are correct.

Bulk connection check

Mark one or several resources in the Resources section and click Check connection.

Connection check from the resource profile

  1. Switch to the Resources section and find the required resource.
  2. Open the resource profile and click Check connection.

Resource editing

To change the Resource name, Description, Policy, User or Service connection, please proceed as follows:

  1. Switch to the Resources section and find the required resource.
  2. Open the resource profile and click  to the right of the required parameter.

  • No labels