Service account reset password

[RCreddy]

Hello,

We have a requirement for service account where only OU=PAMprod_Service account should be able to perform the reset password for service account.

Now the current functionality is but we don't want this every user who is having admin savrole is able to perform reset password for service account.

Please let me know where can we configure this functionality

[PremMahadikar]

Hi @RCreddy ,

This can be handled by 'change password access query' at endpoint config.

Assuming you are storing 'OU=PAMprod_Service' in account details. Please try below

where u.userkey in (select ua.userkey from user_Accounts ua where ua.accountkey in (select a.accountkey from accounts a where a.name like 'OU=PAMprod_Service' and a.endpointkey=<000>))

Also sharing some links for reference:

- Use cases and Implementation examples for managing passwords

- More about 'Change Password Access Query'

If this reply answers your question, please consider selecting Accept As Solution and hit kudos.

[rushikeshvartak]

@PremMahadikar  Query is wrong 

Service Account is always orphan hence joining user_Accounts in query is not correct

@RCreddy  Currently which account to be visible can't be restricted however how to show can be only restricted