For resources based on Windows OS, * nix OS and MS SQL Server, MySQL, OracleDB and PostgreSQL, you can configure a service connection that will allow you to perform the following operations:

Checking the connection to the resource
Synchronization of accounts
Account password verification
Resetting account passwords
Synchronization of account security groups
Synchronization of data about the OS or DBMS version

The service connection can be configured both when adding a resource or after adding it to Indeed PAM, this article will consider examples of setting up a service connection for resources already added to the system.

Adding accounts

Service operations are performed on behalf of a service account. Both a local resource account and a domain account can be assigned to the service role. Before setting up a service connection, you must add a local or domain account to the system.

Adding a resource
Adding local accounts
Adding a domain
Adding domain accounts

Selecting and configuring a service connection

Open the resource profile and click to the right of the Service connection option
Enable the Use connector for service connection option

Setting up a service connection for Windows

Select Connector - Windows
Specify the Address (DNS name/IP address)

Selecting a service account

Enter the Name of the local or domain account in whole or in part
Select an account
Complete the service connection setup

Setting up a service connection for *nix

Select Connector - SSH
Select the connection template

Specify the Address (DNS name/IP address)

Indeed Privileged Access Manager 2.3 Documentation > Setting up a service connection for resources > ResourcesAdd8.png

The Template field contains templates of service operations for OS *nix. By default, templates of service operations for OS * nix are absent in Indeed PAM. To create and add a template, please contact Indeed technical support.

Selecting a service account

Enter the Name of the local account in whole or in part
Select an account
Complete the service connection setup

Setting up a service connection for MS SQL Server DBMS

Select Microsoft SQL Server Connector
Enter Connection address

Selecting a service account

Enter the Name of the domain account or DBMS account
Select an account

Complete the service connection setup

If an instance of MS SQL Server is part of an Active Directory domain, then both domain and DBMS accounts can be used as a service one.
If an instance of MS SQL Server is not part of an Active Directory domain, then only DBMS accounts can be used as a service one.

Setting up a service connection for OracleDB

Select Oracle Database Connector
Enter Connection address, port and SID of the DBMS or DB instance

Selecting a service account

Enter the Name of the DBMS account in whole or in part
Select an account
Complete the service connection setup

Setting up a service connection for PostgreSQL/PostgreSQL Pro

Select PostgreSQL Connector
Enter Connection address and Port

Selecting a service account

Enter the Name of the DBMS account in whole or in part
Select an account
Complete the service connection setup

Setting up a service connection for MySQL

Select PostgreSQL Connector
Enter Connection address and Port

Selecting a service account

Enter the Name of the DBMS account in whole or in part
Select an account
Complete the service connection setup
To perform service operations Indeed PAM uses the mysql_native_password authentication type, other authentication types are not supported.

Setting up a MySQL service account

Open the MySQL service account profile and click to the right of the Name option
Fill in the Enter new host for account field