Axidian Privilege Indeed Identity PAM interacts with end users through a service account that reads directory users and their attributes.

Account to Use with User Directory

1. Run the Active Directory Users and Computers snap-in.
2. Open the context menu of the organizational unit or container.
3. Select Create → User item from the menu.
4. Specify the user name, e.g, IPAMManager.
5. Fill in the required fields and complete the account creation.

Alternatively, you can use an existing account.

Account for Service Operations in Active Directory

1. Run the Active Directory Users and Computers snap-in.
2. Open the context menu of the organizational unit or container.
3. Select Create → User item from the menu.
4. Specify the user name, e.g, IPAMADServiceOps.
5. Fill in the required fields and complete the account creation.
6. Open the context menu of organizational unit, container or domain root.
7. Select Properties.
8. Open Security tab.
9. Click Add.
10. Select an account IPAMADServiceOps and click Ok.
11. Click Advanced.
12. Select an account IPAMADServiceOps and click Edit.
13. Specify the value of the field Applies to to the Descendant User objects.
14. In the Permissions section check the Reset password checkbox.
15. Save.

Alternatively, you can use an existing account.