Credentials Dashboard

The Credentials dashboard shows all accounts discovered within your environment. It is specifically focused on managing service account password rotation. A managed account is any host local account, domain account, or Privilege Secure application local account that has its credentials managed by the application. This includes managed user accounts created by activity sessions. The Credentials dashboard displays the same information as the Credentials Page.

The dashboard has the following features:

• Search — Searches the table or list for matches to the search string. When matches are found, the table or list is filtered to the matching results. You can search for a specific host or account.

• Filter — Provides options to filter results based on a chosen criterion:

  • Method — Filter by whether the account is managed by the application: All, Managed, and Unmanaged. Managed accounts include both Automatic managed and Manual managed.
  • Managed Type — Filter by account type: All, Internal, Standard, and Service. An Internal account is a Privilege Secure application local account.
  • Privilege Type — Filter by type of privilege the account has: Not Set, Administrator, Power User, Guest, User, Sudoer, Linux User, Cisco Privilege 0, Cisco Privilege 1, and Cisco Privilege 15

• Manage — Set the selected account to be managed by Privilege Secure. This button is only available when the account Managed Type is Standard or Internal. For an Internal account, a pop up window will display. See the Manage Internal Service Accounts section for additional information.

• Unmanage — Remove the account from being managed by Privilege Secure

• Rotate Service Account — Opens the Account Dependencies window. This button is only available when the Managed Type is Service. See the Account Dependencies Window topic for additional information.

• Schedule Rotation — Add the credential rotation task to the queue. This button is only available when the Method is Automatic managed. See the Scheduled Tasks Page topic for additional information.

• Verify — Checks that the credentials for the selected account match the credentials set by Privilege Secure

• View History — Opens the Password History window to displays the password history for the account. See the Password History Window topic for additional information.

• Refresh — Reload the information displayed

The table has the following columns:

• Checkbox — Check to select one or more items

• Account — Name of the account. The following icons may also appear in this column:

  • Set Password icon — Opens the Set Password for Credential window to set a new password for the selected account.See the Manage Internal Service Accounts topic for more information.
  • Clipboard icon — Copies the password for the selected account
  • Information icon — Opens the View Password window to view the password and copy it to the clipboard. The window stays open for 20 seconds. See the View Password Window topic for additional information.

• Resource — Name of the resource that the account is on. Click the link to view additional details.

• Privilege — Level of privilege the account has on the resource

• Platform — Displays the type of platform, which defines the resource

• Method — Indicates how the account is managed:

  • Automatic — Credential rotation is managed by Privilege Secure according to the change policy for that platform type. See the Platforms Page topic for additional information.
  • Manual — Credential rotation must be initiated manually with the Rotate Service Account button, or the credential must be manually updated on both the resource and in Privilege Secure. See the Service Accounts Page section for information on updating credentials for Internal service accounts.
  • Not Managed — Not currently managed by Privilege Secure and no credentials have ever been stored

  NOTE: See the Rotation Methods topic for additional information.

• Managed Type — Type of managed account:

  • Standard — Local or domain user account, including managed users created by activity sessions
  • Internal — Internal service account used by Privilege Secure with no dependencies. See the Service Accounts Page topic for additional information.
  • Service — Local or domain service account with one or more dependencies. Includes Internal service accounts with one or more dependencies.

• Dependents — Number of scheduled tasks or Windows services using this account

• Password Changed — Date timestamp for the last time the password was rotated

• Age — Number of days since the last credential rotation or from when the password was first created

• Status — Indicates if the account credentials have been verified by Privilege Secure. See the Platforms Page topic for additional information on configuring a verification schedule.

  • Unspecified — Verification check has not run
  • Verified — Confirmed the credentials match the value stored in Privilege Secure
  • Mismatch — Credentials do not match the value stored in Privilege Secure. This status only appears when the Reset on Mismatch option is not enabled.
  • Changed — Credentials were successfully updated to match the value stored in Privilege Secure. This status only appears when the Reset on Mismatch option is enabled.
  • Failed — Attempt to update the credentials to match the value stored in Privilege Secure was unsuccessful. This status only appears when the Reset on Mismatch option is enabled.

• Last Checked — Date timestamp of the last verification check

• Next Change — Date timestamp for the next credential password rotation

• Last Logon — Date timestamp for the last time the account authenticated

The table columns can be resized and sorted in ascending or descending order.