Explorer

Solved

Hiding sensitive credentials for Standard users on FortiPAM

Forum|Forum|2 years ago
August 14, 2024
4 replies
1904 views

Hello FortiPAM admins, I'm looking for a way to hide secrets sensitive credentials ( Username and Password ) from users with View or Edit roles

FortiPAM

Best answer by ozkanaltas

Hello @aliben ,

If your user has edit permission you can't hide the password from them. But if your user just has view permission, FortiPAM doesn't show the password to them.

ozkanaltasAnswer

Valued Contributor III

Hello @aliben ,

If your user has edit permission you can't hide the password from them. But if your user just has view permission, FortiPAM doesn't show the password to them.

Bjay_Prakash_Ghising

Explorer II

Hi @ozkanaltas

Can you confirm it once again. If view permission allow you to hide password of the secrets.

Edit:

Users with the following permission can view secret passwords on the GUI:

Owner
Edit
View (Only for users with roles where View Encrypted Information is enabled)

So, role with "View Encrypted Information " disabled can't see the password of the secret.

Valued Contributor III

Hi @Bjay_Prakash_Ghising ,

Yes,sure.

For example, this user has just "view" permission for this secret. User can't edit or view passwords.

But if I give edit permission to this user. Users can view and edit passwords.

There is one important point. Your user role should be Standart User should not Power User or Administrator.

Bjay_Prakash_Ghising

Explorer II

Understood. Thanks @ozkanaltas for sharing.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.

Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.