Secure Private Access (ZPA)
About Privileged Credential Pools
Privileged credential pools can be used to streamline access to privileged consoles by mapping authentication details using a privileged credentials policy. Multiple users can gain access to the privileged console that the privileged credential pools are designated to. After you create a privileged credential pool, you can map it to a privileged console by creating a privileged credential policy using the SAML and SCIM policy criteria types.
Privileged credential pools provide the following benefits and enable you to:
- Allow controlled access to multiple users by using a privileged console with allocated credential pooling.
- Provide users access to the privileged console without having to manually log in.
- Allow users to start a privileged console session without needing to provide credentials.
- Prevent users from accessing the privileged console if all privileged credentials from the privileged credentials pool are exhausted or in use.
If you want to use privileged credential pools, you must first create privileged credentials and the privileged portals and privileged consoles that you want to assign the credentials to.
About the Privileged Credential Pools Page
On the Privileged Credential Pools page (Administration > Privileged Remote Access > Privileged Credentials > Privileged Credential Pools), you can do the following:
- Hide the filters on the page by clicking Hide Filters. Click Show Filters to display the filters.
If you are using a Microtenant, then the Microtenant Ownership Type filter is available. By default, the Configured within Microtenant filter option is applied to show the privileged credentials configured within that specific Microtenant. The options for the filter are based on access type (Global and Configured within Microtenant). The Global option filters the information in the table that is configured within the Default Microtenant. The only available operator for this filter type is Equals.
- Add a new privileged credential pool.
- Expand all the displayed rows in the table to see more information about each privileged credential pool.
- View a list of all privileged credential pools that are configured. For each privileged credential pool, you can see:
- Name: The name of the privileged credential pool. To view credentials, enter the name of the credentials in the search field that you want to copy.
- Credential Type: The protocol type that was designated for that particular privileged credential. The protocol type options are SSH, RDP, VNC, and RealVNC. Each protocol type has its own credential requirements.
After the type is selected and the privileged credential is saved, this option can’t be changed.
- Privileged Credentials: The number of privileged credentials that are assigned to the privileged credential pool.
- Updated Time: The date, time, and time zone that the privileged credential pool was created.
Privileged credentials that are created in the Default Microtenant are inherited across Microtenants.
You can only update the name of the privileged credential pool and change the selection of the privileged credentials. You can't change the protocol type.
- Delete a privileged credential.
- Display more rows or a different page of the table.
- Go to the Credentials page to manage your privileged credentials.
- Go to the Privileged Approvals page to add new approvals or manage existing approvals.
- Go to the Privileged Consoles page to add new consoles or manage existing consoles.
- Go to the Privileged Portals page to add new privileged portals or manage existing privileged portals.
