Contents

List of Examples

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in This Guide

• New and Changed Features for 11g Release 2 (11.1.2.3.0)
• New and Changed Features for 11g Release 2 (11.1.2.2.0)
• Other Significant Changes in This Guide

Part I Introduction to Oracle Privileged Account Manager

1 Introduction to Oracle Privileged Account Manager

• 1.1 What is Oracle Privileged Account Manager?
• 1.2 Why Use Oracle Privileged Account Manager?
  • 1.2.1 Features
  • 1.2.2 Functionality
  • 1.2.3 Architecture and Topology
• 1.3 How Oracle Privileged Account Manager is Deployed in Oracle Fusion Middleware
• 1.4 Understanding the Relationship between Oracle Privileged Account Manager Entities
• 1.5 System Requirements and Certification

2 Understanding Oracle Privileged Account Manager Security

• 2.1 Overview
• 2.2 Understanding Oracle Privileged Account Manager Authentication
  • 2.2.1 Authentication for the Oracle Privileged Account Manager Console
  • 2.2.2 Authentication for the Oracle Privileged Account Manager Server
• 2.3 Understanding Oracle Privileged Account Manager Authorization
  • 2.3.1 Administration Role Types
  • 2.3.2 End Users
• 2.4 Securing Oracle Privileged Account Manager
  • 2.4.1 Securing the Network Channel
    • 2.4.1.1 Connecting to Target Systems
    • 2.4.1.2 Securing the End User Interface
  • 2.4.2 Securing Shared Accounts
    • 2.4.2.1 What is a Shared Account?
    • 2.4.2.2 Security Limitations
    • 2.4.2.3 How to Secure the Account
  • 2.4.3 Enabling Password Resets
  • 2.4.4 Avoiding Assignments through Multiple Paths
  • 2.4.5 Defining Richer Password Policies
  • 2.4.6 Delegating Administration
  • 2.4.7 Hardening the Back-End Oracle Privileged Account Manager Database
• 2.5 Understanding Session Management Security
• 2.6 Understanding Plug-In Security

Part II Basic Administration

3 Getting Started with Managing Oracle Privileged Account Manager

• 3.1 Before You Begin
• 3.2 Understanding ICF Connectors in Oracle Privileged Account Manager
  • 3.2.1 About the ICF Connectors
  • 3.2.2 Locating the Oracle Privileged Account Manager Connector Bundles
  • 3.2.3 Consuming ICF Connectors
• 3.3 Starting Oracle Privileged Account Manager
  • 3.3.1 Starting WebLogic
  • 3.3.2 Configuring an External Identity Store for Oracle Privileged Account Manager
  • 3.3.3 Preparing the Identity Store
  • 3.3.4 Assigning the Application Configurator Role to a User
• 3.4 Administering Oracle Privileged Account Manager
• 3.5 Working with Oracle Privileged Account Manager Self-Service

4 Starting and Using the Oracle Privileged Account Manager Console

• 4.1 Before You Begin
• 4.2 Invoking Oracle Privileged Account Manager's Web-Based Console
• 4.3 Navigating Oracle Privileged Account Manager's Console
  • 4.3.1 Working with the Home Accordion
  • 4.3.2 Working with the Administration Accordion
  • 4.3.3 Working with the Reports Accordion
  • 4.3.4 Working with the Configuration Accordion
  • 4.3.5 Working with the Search Portlet
  • 4.3.6 Working with a Search Results Table

5 Configuring and Managing the Servers

• 5.1 Understanding the Servers
  • 5.1.1 Oracle Privileged Account Manager Server
  • 5.1.2 Oracle Privileged Session Manager Server
  • 5.1.3 Identity Connector Server
• 5.2 Managing an Oracle Privileged Account Manager Server
  • 5.2.1 Before You Begin
  • 5.2.2 Configuring a Connection to the Oracle Privileged Account Manager Server
  • 5.2.3 Managing Oracle Privileged Account Manager Server Properties
    • 5.2.3.1 From the Console
    • 5.2.3.2 From the Command Line
• 5.3 Managing the Oracle Privileged Session Manager Server
  • 5.3.1 Before You Begin
  • 5.3.2 Configuring a Connection to the Oracle Privileged Session Manager Server
  • 5.3.3 Managing the Oracle Privileged Session Manager Properties
• 5.4 Managing a Connector Server
  • 5.4.1 Installing and Configuring a Connector Server
    • 5.4.1.1 Installing and Configuring The Connector Server
    • 5.4.1.2 Configuring SSL Between the Connector Server and the Windows Target
    • 5.4.1.3 Configuring SSL Between Oracle Privileged Account Manager and the .NET Connector Server
    • 5.4.1.4 Enabling Logging
  • 5.4.2 Installing the Windows Connector
    • 5.4.2.1 Installing the Connector in the Connector Server
  • 5.4.3 Managing a Connector Server Configuration in Oracle Privileged Account Manager
    • 5.4.3.1 Managing a Connector Server Configuration

6 Working with Targets

• 6.1 What Are Targets?
• 6.2 Adding and Configuring Targets in Oracle Privileged Account Manager
  • 6.2.1 Adding a Target
  • 6.2.2 Configuring a Target
    • 6.2.2.1 Configuring the Database Target
    • 6.2.2.2 Configuring the LDAP Target Type
    • 6.2.2.3 Configuring the Lockbox Target Type
    • 6.2.2.4 Configuring the UNIX Target Type
    • 6.2.2.5 Configuring the Windows Target Type
    • 6.2.2.6 Configuring the SSH Target Type
    • 6.2.2.7 Configuring the SAP UM Target Type
    • 6.2.2.8 Configuring the SAP UME Target Type
  • 6.2.3 Configuring Custom Attributes for a Target
  • 6.2.4 Copying Third-Party JARs
    • 6.2.4.1 Copying Third-Party JARs for the Database Target
    • 6.2.4.2 Copying Third-Party JARs for the SAPUM and SAPUME Targets
• 6.3 Searching for Targets
• 6.4 Opening a Target
• 6.5 Managing a Target's Service Account Password
• 6.6 Removing Targets from Oracle Privileged Account Manager

7 Working with Service Accounts

• 7.1 Understanding Service Accounts
• 7.2 Creating Service Accounts
  • 7.2.1 Creating a Target System SUDO User Account for Connector Operations
• 7.3 Managing Service Account Passwords
  • 7.3.1 Showing Service Account Passwords
  • 7.3.2 Viewing the Password History
  • 7.3.3 Resetting Service Account Passwords
  • 7.3.4 Understanding Service Account Password Rollover

8 Configuring and Managing Agents

• 8.1 What is an Agent?
  • 8.1.1 What is an Oracle Privileged Account Manager Agent for Windows?
  • 8.1.2 Architecture and Functionality of the OPAM Agent
• 8.2 Deploying the OPAM Agent on a Windows Target
  • 8.2.1 Reviewing the Supported Components and Important Notes for Installation
    • 8.2.1.1 Important Notes for Installation on Microsoft Windows Server
  • 8.2.2 Setting Up the Windows Server
    • 8.2.2.1 Enabling Desktop Experience for Microsoft Windows Server 2008 R2
    • 8.2.2.2 Enabling Media Foundation Components For Microsoft Windows 2012 Server and Microsoft Windows 2012 Server R2
  • 8.2.3 Installing the OPAM Agent
  • 8.2.4 Setting up the OPAM Agent
    • 8.2.4.1 Registering the OPAM Agent with the Oracle Privileged Account Manager Server
    • 8.2.4.2 Updating the Target Key in Oracle Privileged Account Manager
  • 8.2.5 Logging Information for OPAM Agent
    • 8.2.5.1 Runtime Logs
    • 8.2.5.2 Register-Time Logs
  • 8.2.6 Monitoring the End-to-End Flow of the Session Recording Process
  • 8.2.7 Un-installing and Deregistering the OPAM Agent

9 Working with Privileged Accounts

• 9.1 What is a Privileged Account?
  • 9.1.1 Managing System Accounts
  • 9.1.2 Managing Application Accounts
  • 9.1.3 Understanding Sharing Accounts
• 9.2 Adding Privileged Accounts into Oracle Privileged Account Manager
  • 9.2.1 Adding the Account
  • 9.2.2 Adding Grantees
  • 9.2.3 Adding CSF Mappings
• 9.3 Searching for Privileged Accounts
• 9.4 Opening Privileged Accounts
• 9.5 Checking Out Privileged Accounts
  • 9.5.1 Checking Out Passwords
  • 9.5.2 Clearing Copied Passwords From the Clipboard
  • 9.5.3 Checking Out Privileged Account Sessions
• 9.6 Checking In Privileged Accounts
• 9.7 Viewing a Session Recording
• 9.8 Managing Privileged Account Passwords
  • 9.8.1 Showing an Account Password
  • 9.8.2 Viewing an Account's Password History
  • 9.8.3 Resetting an Account Password
• 9.9 Removing Privileged Accounts from Oracle Privileged Account Manager

10 Working with Policies

• 10.1 What Are Oracle Privileged Account Manager Policies?
• 10.2 Working with Password Policies
  • 10.2.1 Searching for Password Policies
  • 10.2.2 Viewing Password Policies
  • 10.2.3 Modifying the Default Password Policy
  • 10.2.4 Creating a Password Policy
  • 10.2.5 Assigning Password Policies
  • 10.2.6 Deleting Password Policies
• 10.3 Working with Usage Policies
  • 10.3.1 Before You Begin
    • 10.3.1.1 Understanding How Grants are Applied
    • 10.3.1.2 Configuring Usage Policies for Users with Session Access
  • 10.3.2 Searching for Usage Policies
  • 10.3.3 Viewing Usage Policies
  • 10.3.4 Modifying the Default Usage Policy
  • 10.3.5 Creating a Usage Policy
  • 10.3.6 Assigning Usage Policies
  • 10.3.7 Deleting Usage Policies

11 Working with Grantees

• 11.1 What Are Grantees?
• 11.2 Granting Accounts to Users
• 11.3 Granting Accounts to Groups
• 11.4 Searching for Grantees
• 11.5 Opening a Grantee
• 11.6 Removing Grantees from an Account

12 Working with Resource Groups

• 12.1 What is a Resource Group?
• 12.2 Creating Resource Groups
• 12.3 Delegating Administrative Privileges
  • 12.3.1 Understanding Delegation
  • 12.3.2 Delegating Privileges to Users and Groups
  • 12.3.3 Opening Users and Groups
  • 12.3.4 Removing Access Privileges
• 12.4 Working with Hierarchical Views
• 12.5 Searching for Resource Groups
• 12.6 Opening Resource Groups
• 12.7 Deleting Resource Groups

13 Working with Plug-Ins

• 13.1 What is a Plug-In?
• 13.2 Developing Plug-Ins for Oracle Privileged Account Manager
  • 13.2.1 Overview
  • 13.2.2 Supported Languages
  • 13.2.3 Prerequisites
  • 13.2.4 Oracle Privileged Account Manager Plug-In Benefits
  • 13.2.5 Design Guidelines
  • 13.2.6 Framework Description
  • 13.2.7 Supported Operations and Timings
    • 13.2.7.1 Pre-Operation Plug-Ins
    • 13.2.7.2 Post-Operation Plug-Ins
  • 13.2.8 Filtering Rules
• 13.3 Creating a Plug-In Configuration
  • 13.3.1 Creating a Duplicate Plug-in Configuration Using the Create-Like functionality
• 13.4 Searching for Plug-In Configurations
• 13.5 Opening a Plug-In
• 13.6 Deleting a Plug-In

14 Working with Self-Service

• 14.1 Introduction to Using Self Service
• 14.2 Viewing Your Accounts
• 14.3 Searching for Accounts
• 14.4 Opening Accounts
• 14.5 Checking Accounts Out and In
• 14.6 Viewing Your Checked-Out Accounts
• 14.7 Checking Out Privileged Account Sessions
• 14.8 Showing a Password

Part III Monitoring Oracle Privileged Account Manager

15 Working with Reports

• 15.1 Overview
• 15.2 Working with Deployment Reports
• 15.3 Working with Usage Reports
• 15.4 Working with Failure Reports
• 15.5 Working with Checkout History Reports

16 Managing Oracle Privileged Account Manager Auditing and Logging

• 16.1 Understanding Oracle Privileged Account Manager Auditing
  • 16.1.1 Configuring Auditing in Oracle Privileged Account Manager
    • 16.1.1.1 Configuring File-Based Auditing in Oracle Privileged Account Manager
    • 16.1.1.2 Configuring Database-Based Auditing in Oracle Privileged Account Manager
    • 16.1.1.3 Deploying Oracle Privileged Account Manager Audit Reports in BI Publisher
    • 16.1.1.4 Setting the Audit Logging Levels
  • 16.1.2 Understanding Oracle Privileged Account Manager Audit Reports
  • 16.1.3 Auditing Application Consumption of Credentials from CSF
• 16.2 Understanding Oracle Privileged Account Manager Logging
  • 16.2.1 Configuring Basic Logging
  • 16.2.2 Example Logging Data

Part IV Advanced Administration

17 Performing Advanced Configuration Tasks for Oracle Privileged Account Manager

• 17.1 Configuring Oracle Privileged Account Manager to Communicate With Target Systems Over SSL
• 17.2 Securing Data On Disk
  • 17.2.1 Enabling TDE Mode
    • 17.2.1.1 Enable TDE in the Database
    • 17.2.1.2 Enable Encryption in the Oracle Privileged Account Manager Schema
    • 17.2.1.3 Enable TDE Mode in the Oracle Privileged Account Manager Server Configuration
  • 17.2.2 Disabling TDE Mode
    • 17.2.2.1 Disable TDE Mode in the Oracle Privileged Account Manager Server Configuration
    • 17.2.2.2 Disable Encryption in the Oracle Privileged Account Manager Schema
• 17.3 Adding New Connectors to an Existing Oracle Privileged Account Manager Installation
  • 17.3.1 Adding Connectors Supplied by Oracle
  • 17.3.2 Adding Custom Connectors
• 17.4 Copying Passwords to the Clipboard
  • 17.4.1 Downloading and Deploying the ZeroClipboard Library Files on the Server
  • 17.4.2 Installing the Adobe Flash Plug-in
• 17.5 Advanced Management of Session Manager Data
  • 17.5.1 Overview
  • 17.5.2 Partitioning
  • 17.5.3 Partition OPSM_SESSIONS Table
  • 17.5.4 Purging
  • 17.5.5 Managing Oracle Text Index for Session Recordings
    • 17.5.5.1 Text Index Optimization
    • 17.5.5.2 Updating the Synchronization Frequency
• 17.6 Moving from a Test Environment to a Production Environment
• 17.7 Rebranding Oracle Privileged Account Manager
  • 17.7.1 Customizing the Login Page
  • 17.7.2 Customizing the Oracle Privileged Account Manager Page
  • 17.7.3 Customizing the About Oracle Information

18 Developing Plug-Ins for Oracle Privileged Account Manager

• 18.1 Overview
  • 18.1.1 Oracle Privileged Account Manager Framework Packages
  • 18.1.2 Special Considerations for Using Oracle Privileged Account Manager Plug-Ins
• 18.2 Setting Up a Plug-In
• 18.3 Understanding the Plug-In API
  • 18.3.1 Communication between the Server and Plug-In
  • 18.3.2 Plug-In Structure
  • 18.3.3 Plug-In Interfaces and Classes
    • 18.3.3.1 PlugInContext
    • 18.3.3.2 PluginResult
    • 18.3.3.3 PrePlugin
    • 18.3.3.4 PostPlugin
    • 18.3.3.5 Property File
• 18.4 Debugging and Logging for Plug-Ins
• 18.5 Example Plug-ins
  • 18.5.1 Pre Plug-In Example
    • 18.5.1.1 Configuring a Pre Plug-In
    • 18.5.1.2 Compiling a Pre Plug-In
  • 18.5.2 Post Plug-In Example
    • 18.5.2.1 Configuring a Post Plug-In
    • 18.5.2.2 Compiling a Post Plug-In
• 18.6 Managing Plug-Ins

19 Integrating Oracle Privileged Account Manager with Other Oracle Identity Management Components

• 19.1 Integrating with Oracle Identity Manager
  • 19.1.1 Topology of Oracle Privileged Account Manager Integration with Oracle Identity Manager
  • 19.1.2 Prerequisites for Integration With Oracle Identity Manager
    • 19.1.2.1 Installing Oracle Identity Manager
    • 19.1.2.2 Configuring an Oracle Identity Manager Administrator
    • 19.1.2.3 Configuring the External Identity Stores
    • 19.1.2.4 Creating LDAP Groups
    • 19.1.2.5 Adding the Oracle Privileged Account Manager CA Certificate
  • 19.1.3 Configuring Oracle Identity Manager for Integration
    • 19.1.3.1 Installing and Configuring the Generic LDAP Connector
    • 19.1.3.2 Creating an Application Instance
  • 19.1.4 Running the opamSetup Script
  • 19.1.5 Creating the OPAM_TAGS and OPAM_CERT_TAGS UDF
  • 19.1.6 Tagging Catalog Entries with Oracle Privileged Account Manager Metadata
    • 19.1.6.1 Verifying the Availability of Catalog Entries
• 19.2 Integrating with Oracle Access Management Access Manager
  • 19.2.1 Prerequisites for Integration With Oracle Access Manager
  • 19.2.2 Enabling Single Sign-On
    • 19.2.2.1 Configure a New Resource for the Agent
    • 19.2.2.2 Configure Oracle HTTP Server for the Access Manager Domain
    • 19.2.2.3 Add New Identity Providers
    • 19.2.2.4 Configure Access to Multiple Applications
• 19.3 Integrating with the Credential Store Framework
  • 19.3.1 Understanding Oracle Privileged Account Manager-Managed CSF Credentials
  • 19.3.2 Provisioning
  • 19.3.3 Lifecycle Management
  • 19.3.4 Application Consumption

20 Troubleshooting Oracle Privileged Account Manager

• 20.1 Introduction to Troubleshooting Oracle Privileged Account Manager
• 20.2 Getting Started with Troubleshooting and Logging Basics for Oracle Privileged Account Manager
  • 20.2.1 Increasing the Log Level
  • 20.2.2 Examining Exceptions in the Logs
• 20.3 Resolving Common Problems
  • 20.3.1 Console Cannot Connect to Oracle Privileged Account Manager Server
  • 20.3.2 Console Changes Are Not Reflected in Other, Open Pages
  • 20.3.3 Cannot Access Targets or Accounts
  • 20.3.4 Cannot Add Database Targets
    • 20.3.4.1 Cannot Connect to Oracle Database with sysdba Role
    • 20.3.4.2 Cannot Find Special Options for Adding a Database Target
  • 20.3.5 Cannot Add an Active Directory LDAP Target
  • 20.3.6 Grantee Cannot Perform a Checkout
  • 20.3.7 Cannot View Users or Roles from the Configured Remote Identity Store
  • 20.3.8 Group Membership Changes Are Not Immediately Reflected in Oracle Privileged Account Manager
  • 20.3.9 Cannot Use Larger Key Sizes for Export/Import
  • 20.3.10 Oracle Privileged Account Manager End Users Gain Privileges They Were Not Explicitly Granted
  • 20.3.11 Cannot Access MSSQL Server Targets and Accounts
  • 20.3.12 Troubleshooting Issues with Using Oracle Database TDE
    • 20.3.12.1 TDE Wallet Errors
    • 20.3.12.2 The TDE Wallet is Open, but Columns Are Not Encrypted
  • 20.3.13 Cannot Open Session or Video Recordings
    • 20.3.13.1 Cannot Access Recordings In the Internet Explorer, Safari, or Firefox 33+ Browsers
    • 20.3.13.2 Cannot Access Recordings in Any Browser
  • 20.3.14 Session Checkout Does Not Work, Even After Granting the Account
  • 20.3.15 OPAM Console Login Does Not Work in Internet Explorer 11 Browser
  • 20.3.16 End User Names Created in Oracle Identity Manager with the "#" Character Cannot Login to Oracle Privileged Account Manager
  • 20.3.17 Audit Records Appear in BI Reports After a Long Delay
  • 20.3.18 The "Failure to Load Windows Connector" Exception Occurs
  • 20.3.19 Failure to Add a UNIX Target or Checkout a UNIX Account
  • 20.3.20 Copying Password to Clipboard Fails in a HA Environment
  • 20.3.21 Error in Loading SAP Classes During the Startup of the Server
  • 20.3.22 Checkout History Search Results for Pattern Search Do Not Include Recent Session Recordings
  • 20.3.23 The OPAMAgentService Windows Service Stops
  • 20.3.24 A User is Able to Access the Grants of Another User
  • 20.3.25 Translation is Missing for Some Attributes in Windows Targets
  • 20.3.26 Administration Tabs are Missing for Delegated Users
• 20.4 Frequently Asked Questions
• 20.5 Using My Oracle Support for Additional Troubleshooting Information

Part V Appendixes and Glossary

A Working with the Command Line Tool

• A.1 Using the Command Line Tool
  • A.1.1 Launching the Command Line Tool
    • A.1.1.1 Launching the Command Line Tool from IAM_HOME
    • A.1.1.2 Launching the Command Line Tool from Oracle Privileged Account Manager Client Archive
  • A.1.2 Issuing Commands
• A.2 Working with the Server
  • A.2.1 getconfig Command
  • A.2.2 getserverstatus Command
  • A.2.3 modifyconfig Command
• A.3 Working with the Connector Server Configuration
  • A.3.1 addconnectorserverconfig Command
  • A.3.2 deleteconnectorserverconfig Command
  • A.3.3 testconnectorserverconfig Command
  • A.3.4 retrieveconnectorserverconfig Command
  • A.3.5 searchconnectorserverconfig Command
  • A.3.6 modifyconnectorserverconfig Command
• A.4 Working with Policies
  • A.4.1 addpasswordpolicy Command
  • A.4.2 addusagepolicy Command
  • A.4.3 modifypasswordpolicy Command
  • A.4.4 modifyusagepolicy Command
  • A.4.5 removepasswordpolicy Command
  • A.4.6 removeusagepolicy Command
  • A.4.7 retrievepasswordpolicy Command
  • A.4.8 retrieveusagepolicy Command
• A.5 Working with Targets
  • A.5.1 addtarget Command
    • A.5.1.1 ldap Target Type Parameters
    • A.5.1.2 database Target Type Parameters
    • A.5.1.3 unix Target Type Parameters
    • A.5.1.4 lockbox Target Type Parameters
    • A.5.1.5 windows Target Type Parameters
    • A.5.1.6 sapum Target Type Parameters
    • A.5.1.7 sapume Target Type Parameters
  • A.5.2 displayalltargets Command
  • A.5.3 modifytarget Command
  • A.5.4 removetarget Command
  • A.5.5 resettargetpassword Command
  • A.5.6 retrievetarget Command
  • A.5.7 searchtarget Command
  • A.5.8 showtargetpassword Command
  • A.5.9 showtargetpasswordhistory Command
• A.6 Working with Accounts
  • A.6.1 addaccount Command
  • A.6.2 displayallaccounts Command
  • A.6.3 checkin Command
  • A.6.4 checkout Command
  • A.6.5 displaycheckedoutaccounts Command
  • A.6.6 modifyaccount Command
  • A.6.7 removeaccount Command
  • A.6.8 resetpassword Command
  • A.6.9 retrieveaccount Command
  • A.6.10 searchaccount Command
  • A.6.11 searchcheckouthistory Command
  • A.6.12 showpassword Command
  • A.6.13 showpasswordhistory Command
• A.7 Working with Grantees
  • A.7.1 displayallgroups Command
  • A.7.2 displayallusers Command
  • A.7.3 grantgroupaccess Command
  • A.7.4 grantuseraccess Command
  • A.7.5 removegroupaccess Command
  • A.7.6 removeuseraccess Command
  • A.7.7 retrievegrantees Command
  • A.7.8 retrievegroup Command
  • A.7.9 retrieveuser Command
  • A.7.10 searchgroup Command
  • A.7.11 searchuser Command
• A.8 Working with Resource Group
  • A.8.1 addresourcegroup Command
  • A.8.2 retrieveresourcegroup Command
  • A.8.3 retrieveresourcegroup Command
  • A.8.4 modifyresourcegroup Command
  • A.8.5 removeresourcegroup Command
  • A.8.6 addresourcegroupmember Command
  • A.8.7 removeresourcegroupmember Command
  • A.8.8 adddelegation Command
  • A.8.9 removedelegation Command
  • A.8.10 retrievedelegation Command
• A.9 Working with Plug-Ins
  • A.9.1 addplugin Command
  • A.9.2 addplugincustomattr Command
  • A.9.3 removeplugincustomattr Command
  • A.9.4 removeplugincustomattr Command
  • A.9.5 retrieveplugincustomattr Command
  • A.9.6 searchplugin Command
  • A.9.7 modifyplugin Command
  • A.9.8 removeplugin Command
• A.10 Exporting and Importing Data
  • A.10.1 export Command
  • A.10.2 filedecryption Command
  • A.10.3 import Command

B Working with Oracle Privileged Account Manager's RESTful Interface

• B.1 Overview
• B.2 Server State Resource
  • B.2.1 Get Server State
• B.3 Connector Server Configuration Resource
  • B.3.1 Add Connector Server Configuration
  • B.3.2 Verify a Connector Server Configuration
  • B.3.3 Update Connector Server Configuration
  • B.3.4 Delete Connector Server Configuration
  • B.3.5 Get Connector Server Configuration
  • B.3.6 Search Connector Server Configuration
• B.4 Configuration Resource
  • B.4.1 Global Configuration Resource
    • B.4.1.1 Get Configuration Resource
    • B.4.1.2 Update Configuration Resource
  • B.4.2 Oracle Privileged Session Manager Configuration Resource
    • B.4.2.1 Get Configuration Resource
    • B.4.2.2 Update Configuration Resource
• B.5 Policy Resource
  • B.5.1 Search for Policies
  • B.5.2 Get Default Policies
  • B.5.3 Password Policy Resource
    • B.5.3.1 Retrieve a Password Policy
    • B.5.3.2 Update a Password Policy
    • B.5.3.3 Create a Password Policy
    • B.5.3.4 Get Accounts for Password Policy
    • B.5.3.5 Delete a Password Policy
  • B.5.4 Usage Policy Resource
    • B.5.4.1 Retrieve a Usage Policy
    • B.5.4.2 Update a Usage Policy
    • B.5.4.3 Create a Usage Policy
    • B.5.4.4 Get Grants for Usage Policy
    • B.5.4.5 Delete a Usage Policy
• B.6 Target Resource
  • B.6.1 Get Target Attributes
  • B.6.2 Add a Target
  • B.6.3 Verify a Target
  • B.6.4 Retrieve a Target
  • B.6.5 Update a Target
  • B.6.6 Remove a Target
  • B.6.7 Search for Targets
  • B.6.8 Get Available Accounts
  • B.6.9 Retrieve Accounts Registered on a Target
  • B.6.10 Get Target Types
  • B.6.11 Reset Password
  • B.6.12 Show Service Account Password
  • B.6.13 Show Service Account Password (Deprecated)
  • B.6.14 Show Service Account Password History
• B.7 Account Resource
  • B.7.1 Add an Account to a Target
  • B.7.2 Get Applicable Usage Policy for the Account
  • B.7.3 Grant a User/Role Access to an Account
  • B.7.4 Add or Remove a CSF Map-Key for an Account
  • B.7.5 Search Accounts
  • B.7.6 Search Assigned Accounts
  • B.7.7 Retrieve an Account
  • B.7.8 Retrieve Grantees on an Account
  • B.7.9 Retrieve Users Who Checked Out an Account
  • B.7.10 Check Out an Account
  • B.7.11 Get All Checked Out Accounts
  • B.7.12 Get Session Checkout Instructions
  • B.7.13 Checkout History for an Account
  • B.7.14 Checkout History
  • B.7.15 Check In an Account
  • B.7.16 Verify an Account
  • B.7.17 Update an Account
  • B.7.18 Remove an Account
  • B.7.19 Remove a User's/Role's Access to an Account
  • B.7.20 Show Password
  • B.7.21 Show Password (Deprecated)
  • B.7.22 Show Password History
  • B.7.23 Show Password History (Deprecated)
  • B.7.24 Reset Password
• B.8 UI Resource
  • B.8.1 Search Accounts (Deprecated)
  • B.8.2 Search Assigned Accounts (Deprecated)
  • B.8.3 Get All Checked Out Accounts (Deprecated)
  • B.8.4 Retrieve Checked-Out Accounts or Checkout Distribution
  • B.8.5 Retrieve Checked-Out Account Information
• B.9 User Resource
  • B.9.1 Get a User
  • B.9.2 Get All Accounts Granted to a User
  • B.9.3 Search Users from Identity Store
  • B.9.4 Search for Assigned Users
• B.10 Group Resource
  • B.10.1 Get Group
  • B.10.2 Get Member Users of a Group
  • B.10.3 Get Member Groups of a Group
  • B.10.4 Get All Accounts Granted to a Group
  • B.10.5 Search Groups from Identity Store
  • B.10.6 Advanced Search for Assigned Groups
• B.11 Resource Groups Resource
  • B.11.1 Create a Resource Group
  • B.11.2 Search Resource Groups
  • B.11.3 View a Resource Group
  • B.11.4 Update a Resource Group
  • B.11.5 Delete a Resource Group
  • B.11.6 Create or Delete a Delegation
  • B.11.7 View Delegations on a Resource Group
• B.12 Plug-In Resource
  • B.12.1 Add Plug-In Configuration
  • B.12.2 Verify Plug-In Configuration
  • B.12.3 Search For Plug-In Configuration
  • B.12.4 Retrieve Plug-In Configuration
  • B.12.5 Update Plug-In Configuration
  • B.12.6 Remove Plug-In Configuration

C Working with the SSH Connector

• C.1 About the SSH Connector
• C.2 Creating Scripts
• C.3 Framing the Search Regex
  • C.3.1 Case 1: Red Hat Target
  • C.3.2 Case 2: Cisco Target
  • C.3.3 Case 3: Juniper Target
• C.4 Sample Scripts
  • C.4.1 Sample Scripts for a Cisco Router With the NX Operating System
    • C.4.1.1 Contents Of the Script Files
  • C.4.2 Sample Scripts for a Juniper Router With the M7I Operating System
    • C.4.2.1 Contents Of the Script Files
  • C.4.3 Sample Scripts for Oracle Integrated Lights Out Manager (ILOM)
    • C.4.3.1 Contents Of the Script Files

Glossary

Index