Sharing Accounts, Resources, and Resource Groups in PAM360

PAM360 offers a flexible and granular control mechanism for sharing accounts, resources, and resource groups with other users or user groups. This ensures controlled access to sensitive credentials while maintaining security and compliance. Privileged accounts within PAM360 can be shared at three levels, depending on operational requirements:

1. Sharing Individual Accounts: Specific privileged accounts within a resource can be shared with designated users or user groups.
2. Sharing Entire Resources: A resource, along with all its associated accounts, can be shared collectively.
3. Sharing Resource Groups: A resource group containing multiple resources can be shared with users or user groups, ensuring streamlined access management.

PAM360 provides two approaches to sharing:

1. Individual Sharing: Assign permissions to specific users or user groups for specific accounts, resources, or resource groups.
2. Bulk Sharing: Perform large-scale sharing of accounts, resources, or resource groups to grant access efficiently across multiple users or groups at once.

By the end of this document, you will gain a detailed understanding of:

1. Sharing Individual Accounts with Users or User Groups
2. Sharing Resources with Users or User Groups
3. Sharing Resource Groups with Users or User Groups

1. Sharing Accounts with Users or User Groups

Follow the below steps to share a particular account with users or user groups, with View or Modify permissions.

1. Navigate to Resources >> Passwords.
2. Click the Account Actions drop-down beside the particular account of the resource that you want to share.
3. From the Account Actions drop-down menu, hover to Share and click either With Users or With User Groups depending on whether you want to share the account with users or user groups.
   
4. In the pop-up box that appears, click the Grant option beside that user or user group with whom the account is to be shared. Choose either View Passwords, or Modify Passwords as the permission level, and click Save.
   

Now, you have successfully shared an account with the required users or user groups. To share numerous accounts in bulk, perform the following steps:

1. From Resources >> Passwords, select the accounts in bulk that you want to share.
2. Now, click the Account Actions drop-down menu at the top pane, hover to Share, and click With Users or With User Groups depending on whether you want to share the accounts with users or user groups.
   
3. In the pop-up box that appears, click the Grant option beside that user or user group with whom the account is to be shared. Choose either View Passwords or Modify Passwords as the permission level and click Save.
   

1.1 Sharing Accounts of a Particular Resource with Users or User groups

Follow the below steps to share accounts of a particular resource with users or user groups, with View or Modify permissions.

1. Navigate to the Resources tab and click on the particular resource whose accounts you want to share.
2. In the Account Details dialog that opens, click the Account Actions icon beside a particular account.
3. Click Share with Users or Share with User Groups.
   
4. In the pop-up box that appears, click the Grant option beside that user or user group with whom the account is to be shared. Choose either View Passwords or Modify Passwords as the permission level.
5. Click Save to apply the share configuration.

Now, you have successfully shared the accounts of a particular resource with the required users or user groups. To share numerous accounts of a particular resource in bulk, perform the following steps:

1. Navigate to the Resources tab and click on the particular resource whose accounts you want to share.
2. In the Account Details dialog that opens, select the accounts to be shared.
3. Now go to More Actions >> Share and click With Users or With User Groups depending on whether you want to share the accounts with users or user groups.
   
4. In the pop-up box that appears, click the Grant option against that user or user group with whom the selected accounts are to be shared. Choose either View Passwords or Modify Passwords as the permission level and click Save.
5. Click RemoteApp Only to share the associated remote app to a particular user group. To know more about configuring a remote app, click here.

2. Sharing Resources with Users or User groups

Follow the below steps to share a resource with users or user groups with any of the three permission levels - View, Modify, or Full Access.

1. Navigate to the Resources tab and click the Resource Actions dropdown beside the particular resource that to be shared.
2. From the Resource Actions drop-down menu, hover to Share and click either With Users or With User Groups depending on whether you want to share the resource with users or user groups.
3. In the pop-up box that appears, click the Grant option beside that user or user group with whom the resource is to be shared. Choose from the permission levels: View Passwords, Modify Passwords, or Full Access.
4. Click Save to apply the share configuration.

Now, you have successfully shared a resource with the required users or user groups. To share numerous resources in bulk, perform the following steps:

1. Navigate to the Resources tab and select the required resources that are to be shared.
2. Click the Resource Actions drop-down menu at the top pane, hover to Share, and click either With Users or With User Groups depending on whether you want to share the resources with users or user groups.
3. In the pop-up box that appears, click the Grant option beside that user or user group with whom the resources are to be shared. Choose from the permission levels: View Passwords, Modify Passwords, or Full Access, and click Save.

3. Sharing Resource Groups with Users or User Groups

Follow the below steps to share a resource group with users or user groups, with any of the three permission levels - View, Modify, or Full Access.

1. Navigate to the Groups tab and click the Actions dropdown beside the particular resource group that to be shared.
2. From the Actions drop-down menu, hover to Share and click either Share With Users or Share With User Groups depending on whether you want to share the resource group with users or user groups.
3. In the pop-up box that appears, click the Grant option beside that user or user group with whom the resource group is to be shared. Choose from the following permission levels: View Passwords, Modify Passwords, or Full Access.
4. click Save to apply the share configuration.

Now, you have successfully shared a resource group with the necessary users or user groups. To share numerous resource groups in bulk, perform the following steps:

1. Navigate to the Groups tab and select the resource groups to be shared.
2. Click the Bulk Configuration drop-down menu at the top pane, hover to Share, and click With Users or With User Groups depending on whether you want to share the resource groups with users or user groups.
3. In the pop-up box that appears, click the Grant option beside that user or user group with whom the resource groups are to be shared. Choose from the permission levels: View Passwords, Modify Passwords, or Full Access, and click Save.