Skip to main content

Getting Started

Once Privilege Secure is installed, complete the following configuration sections to enable users to create activity based sessions on defined resources.

Additional capabilities such as Access Certification, email notifications, and SIEM service integration can be enabled in their respective configuration pages.

Configure MFA​

Privilege Secure requires a multi-factor authentication (MFA) solution (Authenticator, DUO, Symantec VIP, etc.) for all user accounts. First time users must register an MFA to use with their Active Directory credentials:

Update the License​

Netwrix Privilege Secure comes with a temporary 30-day license. Contact the organization’s Stealthbits sales representative to purchase a license:

Privilege Secure licensing is done according to user count. Any user who is provisioned access to Privilege Secure will consume a license after their first login. This is true for all users, regardless of role (Administrator, Reviewer, User, or Custom Role).

Add Service Accounts & Domains​

Prior to using Privilege Secure, it is necessary to add the service accounts and domains that contain the users, groups and resources:

  • Service Accounts Page — Add the account credentials that will grant access to the required resources
  • Add New Domain — Add the Active Directory domains that contain the users, groups, resources and service accounts that Privilege Secure will use to grant access

Add Users, Resources & Activities​

Before users can create sessions, it is necessary to setup an access policy. A user must be a part of an access policy to create a session. The access policy determines what activities the users can perform and on what resources. An Access Policy consists of three parts that must be configured first:

  • Users & Groups Page — Add the Users and Groups from AD that will use the Privilege Secure Console
  • Resources Page — Add the resources such as Windows or Linux servers that the users will access via the Privilege Secure Console
  • Activities Page — Add the actions that Privilege Secure will perform before, during and after a session, such as temporarily adding the user to a local admins group

Configure Access Policies​

Once the users, groups and resources are added to the console, it is now possible to create access policies to control privileged access:

Create Sessions​

Privilege Secure is configured and ready to use:

  • Create My Activity Session — Create a session to grant temporary privileges and gain access to the resources defined by the previously created access policy
  • Browser Extension Interface — Conveniently access all of your previously created activities from within an internet browser