• State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 62 subscribers
  • Views 2984 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Service Account management?

Ian S. Lindsay
over 6 years ago

Can the Active Roles service account be managed by a PAM solution?

  • 0 over 6 years ago
    If that PAM solution wants to change that service account's password, this could have ramifications on the availability of the ActiveRoles administration service should this service need to be restarted. If the PAM solution can manage that - i.e. update the password configured in the Admin Service windows service, then I don't see any reason why you couldn't manage it that way.

    The other consideration here though is whether or not AR is configured such that the service account is being used by AR to perform changes in Managed Domain(s) (i.e. no separate override account). If this IS the case, then I would say that having a PAM solution manage it could be very problematic due to the likelihood of on-going password changes by the PAM solution.