Shared Accounts Password Management (SAPM)

The Shared Accounts Password Management (SAPM) feature is used to store shared privileged accounts’ passwords that are used by more than one person. SAPM stores 2 types of accounts: Dynamic and Static.

In Dynamic accounts, once an account is configured in SAPM, the Password Vault connects to the system, changes, and stores the password, after encrypting it. During the password lifecycle, the Password Vault changes the password periodically, and after each checkout. It logs checkout details, like the user, date, time, and reason, and provides accountability for password checkout events.

Static accounts are accounts that are statically stored on the SAPM. Before adding a device’s local accounts to SAPM, the account passwords are checked and stored. These accounts are called dynamic configured static accounts. When static accounts are stored without any device connection, they are called static configured static accounts.