A user performs a break glass check out when they need immediate access to an account that they are not authorized to manage.
Break Glass accounts are shared accounts that are not assigned to the user according to the user role. However, the user can obtain the account password if the need arises.
In a Break Glass check out process, a notification message is sent to the role administrator, informing the administrator that a Break Glass check-out process occurred, however, the administrator cannot approve nor stop the process.
The checked out Break Glass account is added to the user's My Checked-out Privileged Accounts tab in the Break Glass option of the Home tab.
Note: Only users with the break glass privileged access role can perform the break glass process.
Copyright © 2013 CA Technologies.
All rights reserved.
|
|