Managed account usages¶
The Managed account usages module lists the uses detected for the managed accounts: Windows services, scheduled tasks, vault aliases, Systancia Access administration services, SSH or Microsoft SQL Server databases. It allows each use to be individually included in or excluded from the password rotation mechanism — to spare, for instance, a critical service whose interruption would cause issues.
Module availability
This module only exists if the password vault mode set in the general options is Systancia Access. It is the Systancia Access agents that feed this list.
Usage list¶
The window opens on the paginated list of detected uses (15, 25 or 50 rows per page). When empty, it displays No usage of managed accounts listed. A search field filters the list on a substring of the name, and multiple selection is supported.
| Column | Description |
|---|---|
| Name | Name of the use: name of the service, of the task, of the alias… |
| Host | Workstation or domain the use was detected on. |
| Managed account | Account this use is attached to. |
| Type | Nature of the use (see below). |
| Status | Icon whose tooltip reads Enabled for password rotation or Disabled for password rotation. |
Possible values of the Type column:
| Type | What it designates |
|---|---|
| Scheduled task | Windows scheduled task running under that account. |
| Windows service | Windows service running under that account. |
| Alias | Vault alias carrying that account. |
| Systancia Access administration service | Systancia Access administration service, privileged or not. |
| SSH | Access to a database over SSH. |
| Microsoft SQL Server | Access to a Microsoft SQL Server database. |
Edit a usage¶
Select a use and click the Properties icon, or double-click the row: it is the only action in the toolbar. The Managed account usage edition window is almost entirely read-only and exposes a single editable checkbox.
| Field | Description |
|---|---|
| Name | Name of the use. Read-only. |
| Host | Host the use was detected on. Read-only. |
| Managed account | Attached account. Read-only. |
| Database instance name | Only appears when filled in, so in practice for Microsoft SQL Server uses. Read-only. |
| Application type | Nature of the use, with the same values as in the list. Read-only. |
| Apply password rotation | Ticked, the use takes part in the rotation of the account's password; unticked, it is excluded from it. ⚠ The checkbox is inactive for uses of type Alias: a vault alias follows the account rotation and cannot be taken out of it here. |
Click Validate to save.
Only the participation in the rotation is edited here
A use appears in and disappears from this list according to what the Systancia Access agent detects: the module allows neither creating nor deleting one. It is limited to adjusting the participation of an existing use in the rotation.