Use different Workflow settings for the same managed account

Document ID : KB000047005
Last Modified Date : 14/02/2018
Show Technical Document Details

Question: 

We need to manage a Linux account, but we need a user group that uses this account without an approval workflow, and another user group that uses the same account with a previous approval workflow. How can I get this scenario?

Answer:  

Regarding your question, there are a few possibilities:

 

A) You can give the Password Manager Role to the group that does NOT need Workflow approval, so they can go to the Password Management section and view the password there;

 

B) You can add the group that does NOT need Workflow approval to the Approvers list, this way they can approve their own requests - they will have to access the Password Management section too, in order to approve their own requests.

 

 

Please note that both options above represents security risks, because you will be raising the privileges of that group, what may allow them to operate over other accounts, not only the account they actually need.