---
title: Configure the Create Privileged Account Process
slug: configure-the-create-privileged-account-process
createdAt: 2025-11-10T22:49:09.920Z
---

The **Create Privileged Account** process enables end users to request and create Privileged Accounts with the appropriate approvals, governance, and business rules automatically enforced.



# Configure Privileged Account Parameters

To successfully create a Privileged Account using the Privileged Account Manager, several parameters must first be configured.

1. Open **Activate Studio** and navigate to **Resources > Privileged Accounts**.
2. Select the account type you want to configure, for example *Generic Account*.
3. Locate the **UserOU** parameter and set the Organisational Unit (OU) where this type of account will be created. This process is similar to how the *Members* parameter was configured previously.
4. If the account type allows an Exchange Mailbox to be created, create a new string parameter named **ExchangeServer** and set its value as follows:

- **On-Premises Exchange:** Use the name of a server already configured under **Resources > Exchange Servers** 
- **Office 365:** Set the value to Office365 

For full instructions on configuring Exchange Servers in Activate, refer to the Exchange configuration article on the Activate Support Portal.

You can also set the **ExchangeServer** parameter at the root of **Resources > Privileged Accounts**. Parameters configured at the root level are inherited by all account types unless specifically overridden.

# Test Creating a Privileged Account

Once configuration is complete, test creating a Privileged Account.

1. Log in to the **Activate Web Portal** as a Service Desk user.
2. Select **Privileged Accounts** from the home page and choose the *Generic Account* type.
3. Click the **Create Account** button on the ribbon bar.

:::hint{type="info"}
If the *Create Account* option is not visible, check the security rights for the Privileged Accounts resource. Ensure that the **System Role / Service Desk Users** role has *Create* permissions on the **Privileged Accounts** node in Activate Studio.
:::

4. Complete the required fields:

- **Name** 
- **Description** 
- **Mail Enabled** 
- **Manager** 
- **Owners** 

5. Click **Next** to continue.

## Onboarding Options

The *Onboarding Options* page displays the login name and email address that will be generated. It also lists any default Services (Service Catalogue Items), Distribution Lists, or Shared Folders automatically assigned based on the account’s associated role.

You can also select **Additional Options** for the new account, such as extra Services, Distribution Lists, or Shared Folders. Activate can also suggest access based on a Department Role or another user profile.

## Confirm and Submit

Review the summary of the Create Account job, then click **Submit**.

By default, the *Create Account* task does not require approval and executes immediately. Approval steps can be added if required.

## Verify the Account

Once the job has completed, use **Active Directory Users and Computers** (or another suitable tool) to verify that the new account has been successfully created in Active Directory.