Security Groups vs Vaults
I see that 'Security Groups' is marked as Legacy.
Permissions I can assign a Security Group to a User. Within in that Security Group I can add the security credential entries belonging to that user.
ie:
5 Users
5 Security Groups
Map User to their Security Group
Jeff(User) = Jeff(Security Group)
As Admin I can see all the users in the folder.
This is tidy, the security credentials appear within the same folder as the host being accessed.
I can group move an entire folder once.
I can update all the entries in the folder once
Vaults:
I have to create new folders
I have to create folders in each Vault.
When I need o move folders/hosts/etc I have to do it in each Vault
When I want to change user credentials I have to access every users Vault
Every step takes time.
Permissions was working for giving access at the entry level.
Vaults appear to be used for grouping entries that have the same high level demographic; ie site, country, building etc
Is Security Groups a good option being that its marked as 'Legacy'
Maybe there is better option for me?
What is the best practices for RDM to manage my situation?
Thanks
All Comments (3)
Hello,
You do not mention what type of data source you are using. Security groups were for our original security system, which is being replaced by our Role Based Access Control.
Everything that you used to do should still be possible with roles. In fact, we recommend you use Vaults in most cases, and they become absolutely necessary when you have more than 3500 entries in your system, but is it your case? If not, you can have the exact same setup.
Just let me know if indeed you hold so many entries. We can also hold a quick session with you to clarify things.
Best regards,
Maurice
I am using MariaDB hosted on AWS.
We are at 501 entries at the moment, maybe double that number in the next few months.
Thanks
Hello,
Thank you for the information.
A better option will be to convert the Security Groups into the new Role Based Access Control security system. We can assist you for this conversion and give you some guidance on the RBAC security system. Please send us an email, with a reference to this topic, at ticket@devolutions.net to book a session.
Best regards,
Érica Poirier