Creating a safe

Warning

Data model objects: safes, users, servers, accounts and listeners are replicated within the cluster and object instances must not be added on each node. In case the replication mechanism fails to copy objects to other nodes, contact technical support department.

1. Select Management > Safes.
2. Click Add.

3. Enter object’s name.

4. Select Blocked option to disable access to object after it’s created.

5. Select system events, about which you want to be notified.

Note

• Notification settings are applied only to the currently logged in Fudo PAM administrator/operator (user with a superadmin, admin or operator role). Each system administrator/operator must log in to Fudo PAM web interface and adjust their settings individually to receive notifications regarding a particular safe.

6. Select Login reason option, to display prompt upon logging in, asking user to enter login reason.

Note

Login reason is not supported in HTTP connections.

7. Select Require approval option to have the administrator approve each connection to servers accessed through configured safe.
8. Assign security policies in the Policies field.

9. From the Note access drop-down list, select user access rights to account related notes.

Note

Notes can be accessed either from the account edit form

accounts list

or in the User Portal.

10. Select Session time limit option and input a minutes value.
11. Select Session inactivity limit option and input a minutes value – a session will be disconnected after the given period.
12. In the Protocol functionality section, select allowed protocols’ features.

Note

With the Suspend option enabled, session content will not be available for viewing when the user minimizes its client application.

13. Select Users tab to assign users allowed to access accounts assigned to this safe.

14. Click Add.

15. Click i next to desired user to enable server access over monitored safe.

16. Click i to close the modal window.

17. Define safe access options.

    • Click . to define the timeframe when given user can access this object.
    • Click . to define daily access policy.

    

    • Click . to allow user to check out and view passwords in the User Portal.
    • Click . to disable access for selected user.

18. Select Granted users tab to assign users allowed to manage this object.

19. Click Add.

20. Click i next to desired user to enable server access over monitored safe.

21. Click i to close the modal window.

22. Select Accounts tab to add accounts accessible through this safe.
23. Click Add.

24. Click . to add accounts.

25. Click . to close the modal window.

26. Click to assign listeners to accounts.

27. Click . to add listeners.

28. Click . to close the modal window.

29. Click Save.

Related topics:

• Data model
• Editing a safe
• Blocking a safe
• Deleting a safe