Create and Configure a New Group

You can connect Identity Security Insights to both cloud and on-premises instances of Password Safe to automatically scan for associated accounts and track your organization’s identities in summarized visualizations.

To access account and identity information, Identity Security Insights requires you to create a user and group with properly-provisioned roles within Password Safe.

Because this user allows Identity Security Insights to access Password Safe, we recommend you create a new user for this purpose.

To use an existing user, see step 9 below.

To Create and Configure a New Group in Password Safe

1. Sign into Password Safe.
2. Create a new group in Password Safe.

   1. From the left menu, select Configuration > Role Based Access > User Management.
   2. Click Groups.
   3. Click +Create New Group.
   4.  Click Create a New Group.
   5.  Enter a group Name.
   6. Enter a group Description.
   7. Click Create Group.
      The group is created in Password Safe.
3. Optionally but recommended, create a new user for the group.
4. Assign the chosen user to the group.

   1. Under Group Details, select Users.
   2. From the Show drop-down list, select Users not assigned.
      A list of all users not currently assigned to a group displays.
   3. Locate the user you wish to add to the group.
   4. Click Assign User.
      The user assigns to the group.
5. Configure API access for the group.

   1. Under Group Details, select API Registrations.
   2. Check the box next to the API registration created for Identity Security Insights.
6. Assign features permissions to the group.

   1. Under Group Details, select Features.
   2. From the Show dropdown menu, select All Features.
   3. Select the following features:
      • Analytics and Reporting
      • Asset Management
      • Password Safe Account Management
      • Password Safe Role Management
      • Password Safe System Management
      • Ticket System
      • User Accounts Management
   4. Click Assign Permissions >  Assign Permissions Read Only.
   5. Click User Audits > Assign Permissions Full Control.
7. Assign Smart Groups permissions and roles to the group.

   1. Under Group Details, select Smart Groups.
   2. From the Show dropdown menu, select All Smart Groups.
   3. Select the All Assets Smart Group.
   4. Click Assign Permissions above the grid, and select Assign Permissions Read Only.
   5. Click the vertical ellipsis button for the All Assets Smart Group.
   6. Select Edit Password Safe Roles.
   7. Check the Auditor box.
   8. Click Save Roles.