The section is intended to work with local and domain accounts.

Account search

The search is performed in the Accounts section.

Quick search

Enter Account name in whole or in part in the search bar.

Extended search

Click Extended search and enter one or more criteria, Account name in whole or in part.
Select account state:

  • Pending
  • Ignored
  • Managed
  • Blocked
  • Removed

Select account location:

  1. Local account
    To search, enter the Resource name or DNS name/IP address in whole or in part.
  2. Domain account
    To search, enter NetBIOS name or DNS name in whole or in part.

Account profile

The profile displays the data specified while adding the account:

  • Name - is the account name.

  • Location - the name of the resource or domain, where the account resides.

  • Description - this can be an arbitrary text.

  • Policy - is the set of rules applied to sessions started with the account.

  • Password (or a Key) checking date - is date and time when the account password or SSH key was last checked.

  • Sync date - date and time of the last data synchronization.

  • Date added - is the date and time when the account was added to Indeed PAM.

  • Last change - is the date and time when the account was last edited.

  • Last password change date - is the date and time when the account password was last changed in Indeed PAM database.

  • Last password change on resource/domain -  is the date and time when the account password was last changed at the Indeed PAM database and at the resource.

Permissions

All permissions where the account is used are displayed in the Permissions tab. The following data is displayed for every permission:

  • # - permission number.
  • User - the Active Directory user, the permission is given to.
  • Account  - the account used to start RDP, SSH or web session at the resources specified in the permission.
  • Resources - the resources that RDP, SSH or web session can be started at under the account specified in the permission.
  • Description - this can be an arbitrary text.

Sessions

All active and finished sessions for the account are available at the Sessions tab. The following data is displayed for every session:

  • User - the Active Directory user who initiated the session.
  • Account - the account used to start RDP, SSH or web session.
  • Resource - the resource that RDP, SSH or web session is started at under the account.
  • Duration - is the session duration.
  • Started at - date and time when the session was started.
  • Finished at - date and time when the session was finished.
  • State - this displays the current status of the session (active or finished).

Events

The account events are displayed in the Events tab. The following data is displayed for every event:

  • Creation time - date and time when the event was created.
  • Code - is the event code.
  • Event - is the event description.
  • Component - is the Indeed PAM component that generated the event. Initiator is the account that initiated the event generation.
  • Initiator - the account that initiated the generation of the event.

For more details on the event simply open it.

Groups

The Groups tab displays a list of groups to which the account has been added. For domain accounts, 

Built-in security groups are not displayed for domain accounts.