Use cases for administrators
As an administrator, you use Human Privilege to control and monitor how people in your organization reach privileged resources. Your work falls into three areas: directory management, privileged access management, and activity monitoring.
Before you begin
Ensure the foundational setup for Human Privilege is complete:
-
You can access the admin console.
-
You followed the Configuration guide to set up cloud accounts, gateways, and access protocols and onboarded resources your users can request access to.
-
Tenant-wide options, such as session logging and multi-factor authentication (MFA) enforcement, are set in Tenant settings.
Admin console overview
The PingOne Privilege admin console provides a centralized interface to manage and monitor privileged access across your organization.
The following tables provide an overview of the Human Privilege sections and pages, with descriptions for admin use cases.
Directory
| Page | Use case |
|---|---|
Service Accounts |
Review and approve service account requests for when users need programmatic or automation-based access. |
Users |
Provides a centralized view to manage users, including Administrator and DevOps roles. |
Groups |
Provides a centralized view to manage groups for organizing collections of users. |
Devices |
Enables management of devices registered to particular users, including viewing device details and activating or deactivating an existing device. |
Nodes |
Configure and manage private proxies and relays that facilitate secure access to resources in private networks. |
Cloud
| Page | Use case |
|---|---|
Clouds |
Onboard cloud accounts from AWS, Azure, and GCP to manage access to cloud resources. |
Targets |
View and manage targets discovered from connected cloud accounts. |
Resources |
View and manage resources discovered from connected cloud accounts. |
IAM Roles |
Import Amazon Web Services (AWS)-managed and custom policies for just-in-time (JIT) access. |
Permission Management
| Page | Use case |
|---|---|
SaaS Apps |
View and manage software as a service (SaaS) apps, such as GSuite. |
Access Management
| Page | Use case |
|---|---|
Access Requests |
View, approve, or reject access requests submitted by users. |
Access Policies |
Create and manage access policies that define rules for granting access to resources. |
Bundles |
View and manage bundles that group related resources for simplified access management. |
Tag Policies |
Create policies for creating tags for resources. View and filter tagged resources. |
Approver Policies |
Create policies for approvers. |
Activity
| Page | Use case |
|---|---|
Activity Logs |
Audit comprehensive activity records of all user actions. |
Session Logs |
Audit SSH, database, RDP, Kubernetes, ECS, and MCP session records. |
Infrastructure
| Page | Use case |
|---|---|
Integrations |
Configure integrations with third-party applications and services. |
RDP User Management |
Create new RDP users. |
Server Management |
Create and manage service controllers that facilitate access to services running in private networks. |
Node Versions |
Create and manage proxy controllers that enable secure access to resources behind firewalls. |