Hi Lee,
Thanks & Regards,
Ganesh![]()
![]()
![]()
![]()
Thanks for the post and our sincere apologies for the delay in response.
You are correct. The only reason why we have the option "Use this password for all user accounts" is because some of our customers requested for it. They needed it during the initial roll out of the product in production. There are some environments where-in passwords are hard coded in many scripts and connectors that utilizes the local linux accounts. In such cases, our customers are in need of setting the same password for all root accounts across all linux machines to make sure that the scripts does not stop working. They understand that it is a security as well as a compliance issue. But they only use this option for the first time to roll out the product in production. Then they work one eliminating all the embedded passwords and switch to using our RestFUL API feature. Once they complete this task, they trigger another bulk reset randomizing the root passwords.
With regards to the ways of triggering reset,
1. At the resource level using the More Actions button - This option is generally not used unless someone wants to change the password of all accounts of a single box or selective accounts of a single box. But it only used when you want to deal with a single box and not more.
2. At the Resource Group Level - This is the most commonly used method as it allows you to filter accounts across multiple resources and also allow you to automate the password rotation of any new resources created in future. When you use this reset method, choosing the "Generate Random Password" option, PMP will use the account level password policy that you have assigned. So this will ensure that you do not have compliance alerts as the correct policy is set at the account level.
3, at the user group - This is not related to resources and accounts password reset at all. The password policy provided under Admin-->Users section is only the user login password of PMP's local authentication. But this option as such will be disabled as per our best practice recommendation.
Hope this help you. Do let us know if you have any further questions. We will be glad to answer them for you.
Thanks & Regards,
Ganesh
[Technical Consultant | Password Manager Pro]
