Account set configuration
Purpose: Allows you to query on the current configuration of existing account sets (both manually and automatically created). In the Request privileged access (PSW) module, the account set configuration is displayed within 3 tabs: "General", Explicitly attached accounts", and "Account inclusion rule". This report displays the account set information using three different modes, one for each Request privileged access (psw) module tab information.
Most of the fields displayed in the Request privileged access (PSW) module account set tabs are reflected in the filters and output from the report.
Account sets deleted from the system are not returned in the report. Furthermore, when deleting a managed system policy associated to an account set, the account set is automatically deleted.
Select the "report type" first (at the bottom of the search criteria). The search criteria will change based on the "report type" you select.
Executable: maqconfiguration
Criteria | Description |
|---|---|
Report type | There are three types of reports to select from:
|
Account set ID | Type a comma-and-space-delimited list of account set IDs to include in the report. Leave the field blank to return all of the account sets or alternatively, search for one or more account set IDs. |
Managed system policy ID | Type a comma-and-space-delimited list of managed system policy IDs to include in the report. Leave the field blank to search on all managed system policies or alternatively, search for one or more managed system policy IDs. |
Creator ID | Type a comma-and-space-delimited list of creator IDs or leave it blank to search all creators. Alternatively, search for one or more creator IDs. |
Shared | When queries are created, they can be shared with other users, or kept personal. Choose one of the following options:
|
Managed account | Search for one or more managed accounts you want to report on. Alternatively, you can type a managed account ID or a pattern of managed account IDs using wildcard characters, ’*’ representing any string of characters and ’?’ representing any single character. |
Managed system ID | Type a comma-and-space-delimited list of managed system IDs to include in the report. Alternatively, search for one or more managed system IDs. |
Valid account | Accounts can become invalid for many reasons, including being deleted from the target system, being removed from the managed system policy or the target system has been removed. Choose one of the following options:
|
Rule ID | Type in a specific rule ID or leave it blank to return all of the rules attached to the account set. |