Getting Started

activate privileged access management (pam) allows organisations to securely manage, control and audit access to privileged accounts across their environment this guide outlines the initial configuration process for importing existing privileged accounts (such as administrator accounts) into activate and assigning ownership for ongoing management initial configuration before configuring pam, ensure your activate licence includes the pam licence the following example provides an overview of configuring activate privileged account resources and importing existing privileged accounts into activate activate caches information for privileged accounts in its database accounts created outside activate pam will not appear immediately — a background task synchronises privileged accounts from active directory into activate at regular intervals in this example, we’ll configure administrator accounts (adm) configure privileged accounts open activate studio navigate to resources > privileged accounts > administrator account in the parameters panel, right click the blank area and select new parameter → blank rename the new parameter to members change the type to ou reference double click the members parameter to edit its value enter the name of the ou that contains the administrator accounts, then click find select the required ou and click ok you will now have a single parameter named members , with the value set to the ou you selected in the explorer pane, right click the administrator account resource and select privilegedaccount tasks > reset cache from ad this imports all user accounts stored in the ou configured in step 8 once completed, you should see your existing administrator accounts listed in both the activate web portal and activate studio assign account owners to assign owners to the synchronised accounts log in to the activate web portal as a user with the activate service desk role select the privileged accounts icon on the home page click on the account type you want to manage (e g , administrator account ) select the account (e g , adm wevans ) click the add owner icon on the ribbon bar if the add owner or remove owner icons are not visible, ensure the system role / service desk users role has appropriate security rights on the privileged accounts resources node search for or select the user who will be the owner of the account click submit to start the workflow if no owner is assigned, approval requests for the privileged account default to the activate service desk role when logged in as a service desk user, these requests may auto approve once the job has completed, return to the account record — the owner will now be displayed