Granting Password-based root Access via Roles

This tutorial shows you how to add a local user and grant password-based root access on a target host to the user.

Key Concepts

• How to add users (Step 2)
• How to add roles (Step 3)
• How to map users to roles (Step 4)
• How to employ roles to grant access to target hosts (Steps 5-8)
• How to connect to target hosts (Steps 9-11)

Steps

1. Login to PrivX as an admin user.

1. Add a new local user via Settings -> Users -> Add User.

The added user is shown in the users list.

1. Add a new role via Settings -> Roles -> Add Role.
2. Our local example user ttester is mapped to role Root for ttester via his username with the corresponding search string (principal=ttester). Please note Matching users: 1 on top right.

The role is shown in the roles list.

1. On Settings -> Hosts, click menu icon -> Edit on the host you want to allow connections to.

1. Click Add Service to add the necessary services on the target host. In this example we will add type SSH and check the Trust on first use option.

1. Click Add Account to map the role Root for ttester onto the root account of this target host. Please note that you will need to know the root account password to complete this step.

1. Click Save to save changes to services and accounts.
2. To verify target host connectivity, logout as the admin user and login as ttester.

1. On Connections -> Available hosts, click the address of the desired target host to initiate connection.

1. User ttester is granted root access on the target host. The root account password needs not be shared to the ttester and secrets remains safe.