Provide business users only with our templates and hide all other entries. Create custom templates with mandatory fields.

Hello Daniel,

Thank you for your requests. Here are answers to your different requests :

We would like to provide our business users with only our custom templates, hiding all other entries so they can only use our predefined templates.

We already plan to add the possibility to create your own profile and potentially customize the existing one. So you would be able to create your business users profile to specify what entry type should be available for that profile. I think that would help.

Additionally, we want to assign different templates to various users or vaults via AD Group Assignment. This would allow us to define multiple templates with specific icon colors, password rules, etc.

Are you talking about the vault content type that we added in the release 2024.2 ? You would like to limit the entry type allowed in a vault to some of your template, am I correct ? And you would like to be able to define different business users profile and assign them to different users. It would allow you to specify entries available for a specific profil and the user could select that profile, is it what you would like ?

It would also be very beneficial if we could create completely new templates. Some existing templates are overloaded with unnecessary fields, and we want to customize our own entries with only the necessary fields, such as username, password, and website. We would like to predefine mandatory fields as well.

Here you would like to be able to customize the UI to show/hide some fields, am I correct ?

Best regards,

Hello Daniel,

Thank you for your requests. Here are answers to your different requests :
We would like to provide our business users with only our custom templates, hiding all other entries so they can only use our predefined templates.

We already plan to add the possibility to create your own profile and potentially customize the existing one. So you would be able to create your business users profile to specify what entry type should be available for that profile. I think that would help.
That looks nice - the thing is - it would be awesome if you can hide for example username and password and still have the template available - so our user must use our predefined templates.
Additionally, we want to assign different templates to various users or vaults via AD Group Assignment. This would allow us to define multiple templates with specific icon colors, password rules, etc.

Are you talking about the vault content type that we added in the release 2024.2 ? You would like to limit the entry type allowed in a vault to some of your template, am I correct ? And you would like to be able to define different business users profile and assign them to different users. It would allow you to specify entries available for a specific profil and the user could select that profile, is it what you would like ?
I´m talking about if I could provide user1 (ad group1) or member of vault1 and user2 (ad group2) or member of vault2
It would also be very beneficial if we could create completely new templates. Some existing templates are overloaded with unnecessary fields, and we want to customize our own entries with only the necessary fields, such as username, password, and website. We would like to predefine mandatory fields as well.

Here you would like to be able to customize the UI to show/hide some fields, am I correct ?

Would be great , if I can make our own templates for example have in the General Tab of a Credential Template only Username + Password + Description make those mandatory and hide every other tab like "more, custom fields, etc."

Best regards,

I would like to at least have templates where your PAM features are not editable (GW and Recording). I still want my users to be able to use templates, just not be able to avoid using a Dvls Gateway and not being recorded. I feel that these are a PAM admin forcible item. If you removed them from the advanced settings, or had a PAM area much like "Advanced" features in the properties where teh PAM console could block changes to it that would be great.

Hello Daniel,

Thank you for answers. If I understand correctly, you would like to be able to force your user to use your template instead of let them the possibility to use the blank entry, am I right ? If it is what you would like, it is something possible. It exists that setting :



In your case, you could set that setting to "Template list only". The entry Username and Password would still be there, but if you create it, it will create an entry based on your template (or one of your template if you have many).

Is it something that could help you ?

And for your last point, I'm taking your request in note. We don't have plan for a feature where it would be possible to define what is available or not in the UI, but we will see if it is something that could interest other and how easy it would be on our side.

Best regards,

Hello @dtech-uma,

Thank you for your request. I have already talked with colleague to see how we could improve that. I understand the use case. We will see how we could improve that.

Best regards,