Use cases for administrators
As an administrator, you use Human Privilege to control and monitor how people in your organization reach privileged resources. Your work falls into three areas: directory management, privileged access management, and activity monitoring.
Before you begin
Ensure the foundational setup for Human Privilege is complete:
-
You can access the admin console.
-
You followed the Configuration guide to set up cloud accounts, gateways, and access protocols and onboarded resources your users can request access to.
-
Tenant-wide options, such as session logging and MFA enforcement, are set in Tenant settings.
Store your credentials
Admins can use PingOne Privilege to store their own credentials for the backend systems they access with the User Vault.
Directory management
The directory holds the users, groups, devices, and service accounts that can reach privileged resources. You can:
-
Manage users: Onboard and manage the people who request access.
-
Manage groups: Organize users for policy assignment.
-
Manage devices: Onboard and manage the devices users sign on from.
-
Manage service accounts: Provide credential-based access for non-human consumers such as internal applications.
Privileged access management
This is where you decide who can reach what, and when:
-
Manage access policies: Grant access automatically based on criteria, with time-bound windows.
-
Manage passwordless access: Configure access that requires no static credentials.
-
Manage access requests: Approve, reject, or revoke the JIT requests users submit, and set up auto-approval policies.
-
Manage targets and resources: Onboard cloud accounts and bring their resources into PingOne Privilege as targets users can request.
Activity monitoring
Every request, session, and approval is logged. You can:
-
Manage activity logs: Review what actions were performed on resources and by whom.
-
Manage session logs: Review and mark audited the sessions opened through PingOne Privilege.
-
Manage access request approval logs: Trace who approved which access requests and when.