EmpowerID supports tracking and assigning responsible owners for key objects like accounts, groups, computers, management roles, Locations, and Shared Credentials. This ownership relationship differs from that of a Person owning an account because that account represents them and is their personal account. Responsible person ownership is to signify who is responsible for an IT object from a security and audit perspective. Any EmpowerID RBAC Actor Type can be assigned as the "single" responsible owner but in most organizations, EmpowerID will be configured to only allow the assignment of single Person objects. The field storing this assignment is called ownerAssigneeID and is found on the respective objects tables.
...
...
...
Having no one responsible for a privileged account is something to avoid. The Accounts without Owners report can help you to avoid such a situation.
...
See Changing the Responsible Party Type for more information. |
To find accounts without a responsible party
- In the Navigation Sidebar, expand System Logs and select Reports.
- Scroll down and click the Accounts without a Responsible Party tile.
- A grid populates with information about all accounts in the EmpowerID system that do not have a responsible party.
To assign a person responsibility for an account
In the Navigation Sidebar, expand Identities and select
...
...
...
...
...
- The account updates automatically when you select the tile, and an Update Complete message informs you when it is finished.
...
To change the owner type or allow the user to choose
...
- In the Navigation Sidebar, expand IT Shop and select Workflows.
- Click the Recycle EmpowerID AppPools workflow and allow it to finish.
To find accounts without owners
...
To bulk assign a responsible party for a number of accounts
- In the Navigation Sidebar, expand
...
- Identities and select User Accounts.
- On the Actions tab, click Assign Responsibility for Accounts.
- On the Select Accounts page that appears, select accounts to assign to a responsible party and click Submit.
- In the Select Person page that appears, select the person you want to assign as the responsible party for the selected accounts and click Submit.
- A Starting workflow message appears, and when the workflow finishes, a Request Complete message appears.
| Div | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||||||||||
|