Previous Topic: PUPM Endpoint and Privileged Account Creation

Next Topic: Access Control for PUPM Connection Information

Create an Endpoint

Creating endpoint definitions in CA Access Control Enterprise Management lets you manage endpoints and discover the privileged and service accounts on that endpoint.

Follow these steps:

  1. In CA Access Control Enterprise Management, click Privileged Accounts, Endpoints, Create Endpoint.

    The Create Endpoint: Select Endpoint page appears.

  2. (Optional) Select an existing endpoint to create the endpoint as a copy of it, as follows:
    1. Select Create a copy of an object of type Endpoint.
    2. Select an attribute for the search, type in the filter value, and click Search.

      A list of endpoints that match the filter criteria appears.

    3. Select the object you want to use as a basis for the new endpoint.
  3. Click OK.

    The General tab of the Create Endpoint task page appears. If you created the endpoint from an existing object, the dialog fields are prepopulated with the values from the existing object.

  4. Complete the fields in the tab. The following fields are not self-explanatory:
    Name

    Defines the logical name of the endpoint.

    Note: This field defines how the name of the endpoint appears in CA Access Control Enterprise Management. You specify connection information when you select the endpoint type.

    Description

    (Optional) Defines the information you want to record for this endpoint (free text).

    Endpoint Type

    Specifies the type of endpoint where your privileged or service accounts reside.

    Note: When you select the endpoint type, you are asked to supply the credentials PUPM requires to manage privileged accounts on that endpoint. The endpoint type you select affects the connection information you have to supply.

    Managed Device

    (Optional) Specifies whether to associate the PUPM endpoint with a CA Access Control for Virtual Environments managed device

  5. (Optional) Click the Login Applications tab and complete the field in the tab.
    Login Applications

    Specifies the login applications to assign to this endpoint.

    Note: Create a login application before you can assign it to an endpoint. You can assign multiple login applications to the same endpoint.

  6. (Optional) Click the Information tab and complete the fields in the tab.

    This tab lets you specify endpoint-specific attributes and use the attributes when you define or modify privileged access roles.

    When a member of the access-privileged role logs in to CA Access Control Enterprise Management, the user gains access to the privileged access accounts according to the attributes defined in the privileged access role.

    Owner

    Specify the name of the endpoint owner.

    Department

    Specify a name of a department.

    Example: Development

    Custom 1...5

    Specify up to five custom endpoint-specific attributes.

    Note: Specify the custom attributes in the privileged access role Members tab, Member Policy section, Member Rule window.

  7. Click Submit.

    CA Access Control Enterprise Management tries to connect to the endpoint using the credentials you provide. If the connection succeeds, the endpoint is created. Otherwise, you receive a connection error.

Related Topics:

Access Control for PUPM Connection Information

VMware ESX/ESXi Connection Information

Windows Agentless Connection Information

CA Identity Manager Provisioning Connection Information

Disconnected Endpoint Connection Information