Licensing
Axidian Privilege has two licensing schemes:
- Licensing by users and resources.
- Licensing by sessions (simultaneous connections).
You can only select one licensing scheme per Axidian Privilege installation.
Additionally, regardless of the licensing scheme, you can purchase a license for Application to Application Password Management (AAPM). This license only affects access to AAPM features and does not affect the ability of users to establish a session through PAM or the ability of an administrator to add a permission to a user.
Licensing by Users and Resources
When selecting this licensing scheme, you will need to determine the number of users and the number of resources in your Axidian Privilege installation.
They are set by the number of licenses of the following types:
- User — determines the number of users who can use PAM.
- Resource — determines the number of resources that can be created in PAM.
When selecting this licensing scheme, the number of sessions (simultaneous connections) is not limited. User licenses can be redistributed between employees (revoke licenses from some employees and allocate them to others). Resource licenses can be freed and then taken by other resources.
Any licenses can be purchased additionally. You can increase the number of licenses of any type at any time.
Issuance of a License
User License
To issue a user license, add at least one active permission to the user. After this, the license will automatically be considered taken by this user. If all user licenses are taken, you cannot add permission to a new user.
Resource License
To issue a resource license, create or restore the resource in Axidian Privilege. After this, the license will automatically be considered taken by this resource. If all resource licenses are taken, you cannot create a new resource.
Revocation (Release) of a License
User License
A user license is released when the user has no active permissions left, i.e. as a result of permission actions such as:
- Revocation
- Suspension
- Expiration
Resource License
The resource license is released when the resource is deleted.
License Validity Period
Types of licenses according to the validity period:
- Not time limited
- Limited by a specific calendar date
- Trial period
- Subscription
Once the license expires, the following operations will no longer be available:
- Add a resource
- Add a user (even if not taken licenses are available)
- Open a session (connect to a resource)
If you do not have unlimited licenses, connections will no longer be available when the licenses expire.
Licensing by Session
When selecting this licensing scheme, you will need to determine the number of sessions (simultaneous connections that can be opened via Axidian Privilege).
When selecting this licensing scheme, the number of users and resources is not limited.
Issuance and Release of a License
A session license is considered taken at the moment the session is opened and is released at the moment the session ends (the reason for termination is not important).
License Validity Period
- Types of licenses according to the validity period:
- Not time limited
- Limited by a specific calendar date
- Trial period
- Subscription
Once the license expires, you will no longer be able to open sessions.
After the license expires, the following operations will remain available:
- Permissions editing
- Created resources editing
- Account editing
If you do not have unlimited licenses, connections will no longer be available when the licenses expire.
Application to Application Password Management License
The AAPM license allows third-party applications to retrieve account secrets from Axidian Privilege.
When purchasing licenses of this type you need to specify the number of accounts that can be accessed using the AAPM.
The number of applications, application users and permissions is unlimited.
The AAPM license is independent of the selected licensing scheme.
The AAPM license can be purchased or removed at any time.
Issuance and Release of a License
An AAPM license is considered taken when the first permission for an application is added to the account.
The AAPM license is released when all permissions are revoked from the account.
Suspension of permission does not release the AAPM license.
License Validity Period
Types of licenses according to the validity period:
- Not time limited
- Limited by a specific calendar date
- Trial period
- Subscription
Once the license expires, the following operations will no longer be available:
- Add new permissions to applications
- Use scenarios for third-party applications to retrieve account secrets from Axidian Privilege