Active Mapping for Exclusive Access
Active Mapping lets you define the principles of access in your IT environment by letting you map User groups with Account Groups. This means that all the Users in the mapped User Group get access to all the accounts in the mapped Account Group. However, if you wish that a particular User from the mapped User group should be given access only to a few accounts from the mapped Account Group, you can switch to the Exclusive Access option.
Procedure:
- Login to the system and select PAM from the product navigator.
- Go to Policies → Active Mapping → New Active Mapping →Fill up the Name and Description
- Check the desired User group and on the other side select the desired Account groups.
- Select the Exclusive Only option.
- Click on Save.
- Go to Policies → Exclusive Access.
Change Default System Value
If the system default value is changed from 1 to 2, then you can take the following steps
- Depending on the requirement Exclusive Access can be mapped User Wise or Account Wise.
- You will find a list of Users and Accounts.
- Select the user group to view the accounts linked to each user within that group.
- You can select one User and give him exclusive access to multiple accounts by selecting the respective accounts.
- Alternatively, you can select an account and map it to multiple users as well.
