This document provides information about how to add an access policy in Domum Remote Access.
The policies are applied at the moment of access request for limited users and they have no effect after the link is sent.
Add access policies
- On Segura® Platform, in the navigation bar, hover over the Products menu and select Domum Remote Access.
- In the side menu, select Access control > Access policies.
- In the Access policies report, click Add.
- In the General tab, complete the following fields:
- In the Access policy name * field, enter the access policy name.
- In the Status button, enable or disable the access policy.
- In the Description field, enter a description for the access policy.
- In the Can Limited Users request their own access? * field, select to allow limited users request their own access.
Info- Keep in mind your approval workflow before enabling this option.
- Limited users can only request access to credentials they had previous access to.
- Limited users need at least one active access to request new access.
- Click Continue.
- Optional: In the Password tab, complete the following fields:
- In the Allow users to view passwords field, enable to allow users to view passwords.
- In the Require approval to view a password field, enable to require approval to view passwords. This field is only available if the Allow users to view passwords field is enabled.
- In the Approvals required for viewing field, select the amount of approvals required for viewing passwords. This field is only available if the Require approval to view a password field is enabled.
- In the Disapprovals required to cancel field, select the amount of disapprovals required for declining the view of passwords. This field is only available if the Require approval to view a password field is enabled.
- In the Approval in levels field, enable to set levels for the approvers. This field is only available if the Require approval to view a password field is enabled.
- Click Continue.
- Optional: In the Sessions tab, complete the following fields:
- In the Allow users to start sessions field, enable to allow users to start sessions.
- In the Require approval to start session field, enable to require approval to start sessions. This field is only available if the Allow users to start sessions field is enabled.
- In the Approvals required field, select the amount of approvals required for starting sessions. This field is only available if the Require approval to start session field is enabled.
- In the Disapprovals required to cancel field, select the amount of disapprovals required for declining the start of sessions. This field is only available if the Require approval to start session field is enabled.
- In the Approval in levels field, enable to set levels for the approvers. This field is only available if the Require approval to start session field is enabled.
- Click Continue.
- In the Approvers tab, click + Add to select the user that will be approvers.
- Select the desired users and click Add.
- In the Governance ID required when justifying? * field, select to request the governance ID when justifying an access.
Info- If the Approval in levels option is enabled, define the level for each approver in the Level column.
- For an approver to access the approval workflow screen, they must have at least the PAM Operator role.
- Click Continue.
- In the Review tab, review all information entered previously and click Save.
A confirmation message will be displayed and the access policy will appear in the Access policies report list.