Transferring Resource Ownership at Different Levels

PAM360 allows administrators to transfer ownership of individual resources, multiple resources, and resource groups to other administrators whenever required. Once ownership is transferred, the previous owner will no longer be able to access the resource unless the new owner explicitly shares it back. Importantly, all existing shares configured for other users will remain intact even after the transfer.

By the end of this document, you will be able to:

1. Transfer the Resource Ownership
2. Transfer the Resource GroupOwnership

1. Transferring the Resource Ownership

PAM360 allows you to transfer ownership of either a single resource or multiple resources in one go. To transfer the ownership of a resource,

1. Navigate to Resources >> Owned and Managed and click the Resource Actions icon next to the required resource.
2. Select Transfer Ownership from the drop-down menu.
3. In the pop-up window, select the administrator to whom you want to transfer ownership and click Save.
   
   

To transfer ownership of multiple resources at once, choose the required resources from the Resources tab and select Resource Actions >> Manage >> Transfer Ownership. In the pop-up window that appears, select the administrator to whom the ownership should be transferred and click Save to apply the changes.

1.1 Transferring all Owned Resources

To transfer the ownership of all resources managed by a specific user, use the steps below:

1. Navigate to the Users tab and click the User Actions icon beside the user whose resources are to be transferred.
2. In the dropdown that opens, click Transfer Resource Ownership.
3. Select the new user account to which the resources are to be transferred.
4. Click Save to complete the transfer.
   

2. Transferring the Resource Group Ownership

In addition to individual resources, administrators can also transfer the ownership of static and dynamic resource groups.

Prerequisites for Dynamic Resource Groups

To transfer the ownership of a dynamic resource group, you must first ensure that the dynamic group share permission is enabled for the administrator from whom the resource group is being transferred. This permission can only be granted at the user group level, not for individual users. Therefore, make sure that only the intended users are part of the specific user group where this permission is assigned. Follow these steps to enable the dynamic group share permission:

1. Navigate to Users >> User Groups.
2. Click the User Group Actions icon beside the required user group and select User Group Privileges.
3. Enable the checkbox Permit group members to share the Dynamic Resource Groups owned by them with others granting ‘Full Access’ permission, then click Save.

Now, follow these steps to transfer the ownership of a resource group:

1. Navigate to the Groups tab.
2. Click the Actions icon beside the required resource group and select Transfer Ownership.
   
3. In the pop-up window that opens, choose the administrator to whom the ownership will be transferred.
4. Read the consent statement, select the checkbox and click Transfer.

Transfer Results Based on Group Type

2.1 Transferring Ownership of Multiple Resource Groups

For large-scale changes, PAM360 allows you to transfer the ownership of multiple resource groups simultaneously. However, this action can only be performed by a Super Administrator. Ensure that you are logged in with a Super Administrator account before proceeding. If needed, refer to the help document on promoting an Administrator to a Super Administrator for guidance.

To transfer ownership of multiple resource groups in bulk, follow these steps:

1. Navigate to the Groups tab, select the required resource groups and click Bulk Configuration >> Transfer Ownership.
   
2. Click View Selected at the top-right corner to verify the list of selected groups.
3. Choose the new administrator from the drop-down list.
4. Read the consent information, enable the checkbox, and click Transfer.