1 vote
We use Beyond Trust to checkout a password every x hours. Everyday I need to update the multiple credentials that use the Beyond Trust password. I am looking for a solution to either:
Scenario #1
Create a credential that contains the password only
The other credentials would link to the password only credential
Scenario #2
Create a credential that contains the username only
Create a credential that contains the password only
The RDP/SSH sessions would be able to select the individual username and password credentials.
To complicate the matters, I had to create multiple RDP files, I am using the free version, is there anyway to link the credentials across all of the RDM files, currently I need to update the credentials in each file?
Thank you.
Hello,
For the RDP part, I would suggest not using RDP files, but instead the "configured" mode of the RDP entry. It will make it much easier to edit, as it will also work with our batch edit features. You can also leverage templates if you need to create RDPs with a default set of settings.
For the credential, I would also suggest looking into batch editing your credentials. It's possible to only edit the password part of your credential entry. If you select multiple username/password entries and select the appropriate batch edit mode:
You can unselect the username and domain from the prompt:
Additionally, we already have a BeyondTrust integration as part of our PAM offering: https://devolutions.net/integration-center/beyondtrust/
Let me know if these solutions help.
Regards,
Hubert Mireault
3ce11b12-fb60-486d-aed0-2ffa5ebbf53f.png
2389a15e-b15e-42be-b3fa-178812969c31.png
84f4fef4-0b75-4cc3-b49d-477a18410fd1.png
Thank you. For clarification, I am using RDM's RDP session, I am not using externally saved RDP file ( that would be a nightmare to update ). I have used the batch update for the password ( thank you, good alternative ), I would still ask to see if creating separate username and credential files that can be used in any RDP/SSH file, this is a feature I used with another competitor about 12 years ago and it worked really well.
We'll keep this in mind as a possible future improvement. Maybe we could leverage our existing "Custom" credential to have a mode to link to a different entry for its user/password. There's a big challenge in our architecture if we want to split the linking of the user and the password everywhere, but having a specific credential be handled this way is more feasible.
Regards,
Hubert Mireault