Accessing the PAM Admin Interface
This section is intended to give you an understanding of what is available on the Admin Interface based on your PAM role.
PAM Admin Interface
Within PAM, the Admin Interface is available to PAM users that are a member of the Owner, Admin or Auditor role. However the level of access will depend on the PAM role assigned.
You can determine the PAM role assigned to you via the user interface.
The PAM roles will determine the view you will see within the Admin Interface and what operations the permissions will allow.
The below table details the available access level for each PAM role.
Section | Action | Owner | Admin | Auditor |
---|---|---|---|---|
Manage | Manage users | r/w | r/w | r/o |
Manage user groups | r/w | r/w | r/o | |
Manage devices | r/w | r/w | r/o | |
Manage Active Directory | r/w | r/w | r/o | |
Manage static vaults | r/w | r/w | r/o | |
Manage accounts | r/w | r/w | r/o | |
Generate Breakglass | Yes | |||
Reveal Credentials | Yes | |||
Manage account mappings | r/w | r/w | r/o | |
Manage profiles | r/w | r/w | r/o | |
Manage schedules | r/w | r/w | r/o | |
Manage files | r/w | r/w | r/o | |
Manage MAP servers | r/w | r/w | r/o | |
Reporting | Device access | r/w | r/w | r/o |
Playback session recordings | Yes | Yes | Yes | |
Export session recordings | Yes | Yes | ||
Shadow live sessions | Yes | Yes | Yes | |
Access requests | r/w | r/w | r/o | |
Change tickets | r/w | r/w | r/o | |
User rights audit | r/w | r/w | r/o | |
Tasks | r/w | r/w | r/o | |
Inventory | r/w | r/w | r/o | |
Management | r/w | r/w | r/o | |
Analytics | r/w | r/w | r/o | |
Behaviour Analytics | r/o | r/o | r/o | |
System | System queue | r/w | r/w | r/o |
System configuration | r/w | r/w | r/o | |
Configure Osirium Support account | Yes | |||
Roles | r/w | r/w | r/o | |
API applications | r/w | r/w | r/o | |
Template library | r/w | r/w | r/o | |
Email subscriptions | r/w | r/w | r/o | |
Configure meta-columns | r/w | r/w | r/o | |
Logs | r/w | r/w | r/o |