Platform Entitlements
IT User and Business User are license types, not user classifications. On the Access > Entitlements page, the Verify Privileged Identity Platform calls these license types entitlements. For more information, see User Classifications.
The Verify Privileged Identity Platform has two license types: Business User and IT User. Their base permissions are displayed in the table below.
Each user consumes a license that matches their entitlement: an IT User license for the IT User entitlement, or a Business User license for the Business User entitlement. Users with the Vendor membership type do not consume an IT User license. To manage Vendor users, see Contractor and Vendor Access.
| Entity | Permission |
Business User |
IT User |
|---|---|---|---|
|
Secrets: |
Add/Create |
✔ |
✔ |
|
|
Approve Access |
✔ |
✔ |
|
|
Copy |
✔ | ✔ |
|
|
Delete/Deactivate |
✔ | ✔ |
|
|
Edit/Update |
✔ | ✔ |
|
|
Launch |
✔ | ✔ |
|
|
Own (Personal and Shared) |
✔ | ✔ |
|
|
View |
✔ | ✔ |
|
Secret Folders: |
Add/Create |
✔ | ✔ |
|
|
Delete/Deactivate |
✔ | ✔ |
|
Audit Logs: |
View Secret Audit Logs |
✔ (secrets they own) |
✔ |
|
|
View User Audit Logs |
✔ (secrets they own) |
✔ |
|
Others’ Secrets: |
Request Access |
✔ | ✔ |
|
Resources for tasks, websites, or portals: |
Use Credential Manager |
✔ (for non-IT related only) |
✔ |
|
|
Use Web Templates in Verify Privilege Vault |
✔ (for non-IT related only) |
✔ |
|
Admin: |
Create/Delete/Modify folders and add secrets to any folder |
✔ | |
|
|
Create/Manage discovery, distributed engines, HA/DR, integrations, pipelines, sites, workflows, etc. |
✔ | |
|
|
Configure password rotation |
✔ | |
|
|
Configure security features for a secret |
✔ | |
|
|
Use any administrative functions of Verify Privilege Vault |
✔ | |
|
|
Use any launcher including Privileged Remote Access (PRA) |
✔ | |
|
|
Use any templates including custom templates |
✔ | |
|
|
Use Connection Manager to launch RDP or SSH sessions |
✔ | |
|
|
Use the Verify Privilege Vault SDK or API |
✔ |