Adding a Resource
To provide access to the resource to the directory users, you must add a new resource to the Axidian Privilege.
- Add manually
- Add from File
Go to the Resources section and click Add.
Enter the name of the resource.
For Windows-based resources, specify the computer name.Fill in the DNS name or IP Address and Description fields.
Enter a description and click Next.
Select the connection type and set the settings depending on the type:
PostgreSQL or MSSQL
Fill in the Default database field.
Choosing a default database does not restrict the user's access to other databases on this resource. The available databases are determined by the rights of the DBMS account specified in the permission.SSH
Set SSH key fingerprint:
- Get from resource — use the SSH key fingerprint from the resource.
- Enter manually — select the algorithm and enter the fingerprint in SHA256 format.
Specify the login formats for local and domain accounts:
Default — the format specified in the connection configuration.
Set manually — login formats are set manually.
Use the required variable%username%and the optional variables%location%,%location-dns%.Examples
Login format for john.smith@pam.local%username%@%location-dns%Login format for SPACE\john.smith%location%\%username%Login format for john.smith%username%
RDP
(Optional) Enable the Run as administrator option.
The RDP session will open with the/adminparameter. The user will have access to the administrative console and will be able to execute commands that require elevated privileges.User connection
infoYou can add your own custom connection type in the Configuration → User connection section.
(Optional) In the URL field, specify the URL to go to when starting the web session.
(Optional) Enable the Regular expression option if query parameters are dynamically added to the URL when navigating to the specified page.
In the URL field, specify the regular expression corresponding to the page address.Example
The session opens at
https://app.org/mainpage.
When clicking on a link to a URL, the parametersthemeandpageare dynamically added.
The page address takes the formhttps://app.org/mainpage /?theme=dark&page=dashboard.
To go to the desired address, enable the Regular expression option and in the URL field, specify the regular expression corresponding to the page address.
For example:https://app.org/mainpage *, where the character*replaces additional parameters in the query string.
Select the connection address:
- Inherit from the resource — the connection address duplicates the DNS name or IP address of the resource.
- Enter manually — the connection address is set manually in the format
https://app.local:portorhttps://app.local.
Fill in the Port field.
Set the Use connector for service connection option and configure the service connection.
In the next step, select a service account.Click Next.
Check the entered data and click Save.
Create a CSV file using the following template:
Name;Description;DNS name;IP address;UC type;UC address;UC port;UC matching url;UC matching url is regex;SC account name;SC type;SC SSH template;SC address;SC port;Cisco privilege mode passwordParameters
Parameter Requirement DescriptionNameRequired Resource name DescriptionOptional Description orDNS nameIP addressRequired DNS name or IP address of the resource. Specify one of the parameters. UC typeRequired User connection type. For more details, see User connection. UC addressOptional IP address or DNS name of the user connection UC portOptional User connection port UC matching urlOptional Login page URL for a web resource UC matching url is regexOptional Indicates whether the login page URL is a regular expression: true— yesfalse— no
Specify if the parameter is set.UC matching urlSC account nameOptional Service account name SC typeOptional Service connection type. For more details, see Service connection. SC SSH templateOptional SSH connector template name. Specify if the service connection type is SSH.SC addressOptional IP address or DNS name of the service connection SC portOptional Service connection port Cisco privilege mode passwordOptional Cisco privileged mode password. Specify if the service connection type is Cisco IOS.CSV file example
APP01;Application server;app01.local;;RDP;;;;;DOMAIN\svc_app;Windows;;;;
WEB01;Corporate website;portal.local;;WebTemplate;https://portal.local/;;https://portal.local/login;FALSE;DOMAIN\svc_web;Windows;;;;
SSH01;Linux server;;192.168.0.50;SSH;;;;;;;;;;Click Add from file.
Choose CSV-file.
(Optional) Enable Adding with policy option if a policy needs to be defined for resources.
Click Save.