A user performs a break glass checkout when they need immediate access to an account that they are not authorized to manage.
Break Glass accounts are privileged accounts that are not assigned to the user according to the user role. However, the user can obtain the account password.
In a Break Glass check-out process, a notification message is sent to the role administrator, informing the administrator that a Break Glass check-out process occurred. However, the administrator cannot approve or stop the process.
The checked-out Break Glass account is added to the user My Checked-out Privileged Accounts tab in the Break Glass option of the Home tab.
Note: Only users with the break glass privileged access role can perform the break glass process.
Copyright © 2011 CA. All rights reserved. | Tell Technical Publications how we can improve this information |