Technical Tip: Clarification of using Web Launcher Access with correct permission profile.

Description

The article describes how to resolve the error 'Unable to launch secret, user needs to have clear text permission for Web launcher'.

Scope

FortiPAM v1.6.x.

Solution

When creating or modifying a secret, the Web Service menu includes a new Web Launcher Access option from FortiPAM v1.6.x. Two options can be used for Web Launcher Access, which are:

Any.

Restricted.

The permission profile must be configured correctly to use one of these options. Otherwise, the following error will show up:

Generally, the mentioned error will be seen when the Restricted option is selected and the user has only the view permission. 

For example: 

Since the user does not have permission to view the password, the user cannot launch the web launcher secret. This is expected behavior. 

To launch the web launcher secret with View permission, the option 'Any' needs to be selected under Web launcher Access. If the option 'Restricted' is required for the network environment,the  User must have either Edit or Owner permission, as follows: