Skip to main content

Add users to Privilege Secure for Discovery

Privilege Secure for Discovery has two levels of user accounts: User and Administrator. A user at the User level can request access to the systems that the account inventory allows. An administrator also sees the Configure menu and Management > Bulk Scans, and can change the settings of a system on the Grant Access page, such as account persistence and offline access. Add the people who need privileged access before you roll out protect mode, so that they can request just-in-time access (JITA) as soon as the product removes their standing access. Add them by Active Directory (AD) group instead of one user at a time.

For the difference between adding an AD account to the product and adding it to the account inventory of a system, see Add a user or group to an account inventory.

Add a group​

  1. Select Configure > Users and Groups.

  2. In Add Username or Group, enter the name of the AD group that contains the users who need privileged access, and select the group from the list.

  3. Select Add User/Group.

    The Users and Groups page with an Active Directory group entered in Add Username or Group

The product adds the group at the User level, and shows a confirmation message. The group appears in the table, which you can search and filter by domain, users, and groups.

Change the level of a group or user​

  1. In the row of the group or user, select Modify.

  2. Select Change to Admin to give the Administrator level, or Change to User to return to the User level.

    The Modify menu of a group, with the options Change to Admin and Remove Group

The Type column shows the current level.

Remove a group or user​

In the Modify menu, select Remove Group or Remove User. For a user, the menu also has Reset 2-Factor Token. See Reset a user's MFA token.