User Credentials and Roles

As described for the Roles Tab, Verify Privilege Manager comes with a set of default user roles. Those roles can be edited or new ones can be added to the system.

The role for the Verify Privilege Manager Administrator gives permissions to manage all aspects of the Verify Privilege Manager implementation. As a best practice, it is recommended to set-up roles that limit administrative access to tasks directly related with a users job role.

For integrations with Verify Privilege Vault keep in mind that Privilege Manger has the ability to use Verify Privilege Vault as its storage container for credentials. This includes credentials for connecting to integrated systems such as Service Now, as well as credentials for local accounts that are managed by Local Security in Verify Privilege Manager. Customers can choose to integrate with Verify Privilege Vault only (no Vault setup) or Verify Privilege Vault and Vault. Either option requires Authentication Data setup for Foreign Systems in Verify Privilege Manager. Refer to the Setting up Integration between Verify Privilege Manager and Verify Privilege Vault topic.

If you are integrating with Active Directory synchronization please refer to Active Directory Synchronization.

If you synced with Azure AD, and then added that user to the Verify Privilege Manager Administrators Role, that Azure AD user has admin rights only, if Azure AD is used as the auth provider. If users login via Thycotic One, use Admin | Users to create a new user and then add that new user to the Verify Privilege Manager Administrators Role, refer to How to Add Thycotic One Users Manually.

Create User during Installation

During the installation process the Create User page is where you enter information for the initial Verify Privilege Manager Administrator user. Please remember these credentials as they are necessary to login to the web application after you complete the installation.