Product Guide › Administering CA Access Control for Virtual Environments › Privileged Account Passwords Management › How CA Access Control for Virtual Environments Create Endpoints and Accounts

How CA Access Control for Virtual Environments Create Endpoints and Accounts

CA Access Control for Virtual Environments automatically creates PUPM endpoints, discovers the privileged account and assigns a password policy to the account passwords.

The following process describes how CA Access Control for Virtual Environments configures PUPM endpoints and accounts:

1. A virtualization administrator adds a PUPM endpoint to a security group.
2. The administrator creates a disconnected privileged account with administrative privileges in CA Access Control Enterprise Management for each endpoint type in the security group.

   CA Access Control for Virtual Environments uses the disconnected accounts to connect to each endpoint and discover the privileged account passwords.

3. In CA Access Control Enterprise Management, an administrator configures the password lockdown policy and assign it to a security group.
4. CA Access Control for Virtual Environments discovers the endpoint and automatically configures the endpoint connection settings and attempts to configure the privileged accounts on that endpoint.
5. If successful, CA Access Control for Virtual Environments creates an endpoint privileged access role for using privileged accounts on that endpoint type.

   For example, the first-time you discover privileged accounts on a Windows Agentless endpoint, CA Access Control for Virtual Environments automatically creates the Windows Agentless Connection endpoint privileged access role.

6. CA Access Control for Virtual Environments automatically assigns the privileged account passwords policy to the privileged accounts on each member of the security group.