Configure Permissions on Multiple Accounts in same folder of same PAM Vault
Is it possible to perform any mass configuration (in particular setting of permissions) of accounts held in the same folder of the same PAM vault? Or is it only possible by means of inheritance or setting permissions on an account by account basis?
We have an L1 folder containing, for example, the accounts serviceA_01, serviceB_01, serviceC_01, serviceA_02, serviceB_02, serviceC_02. We want to grant L1_user_01 access to all of the *_01 accounts in the L1 folder and grant L1_user_02 access to all of the *_02 accounts in the L1 folder. Is this possible as some kind of mass action (select accounts and assign permissions)?
All Comments (1)
Hello derrybirse,
Thank you for reaching out to the Devolutions support team.
Depending on the version you are using, it could be different.
But on the latest version 2025.3, the permissions are inherited by default.
Which means, the PAM account will inherit the permissions from the folder or the one at the top.
In your use case, to keep it simple, I suggest keeping your L1 folder, but creating 2 sub-subfolders.
L1_01 and L1_02.
Under it, you can configure your permissions per user or per group.
By the Grant access option, it could be done in a couple of clicks.
Best regards,
Patrick Ouimet