Hiding sensitive credentials for Standard users on FortiPAM

[aliben]

  Hello FortiPAM admins, I'm looking for a way to hide secrets sensitive credentials ( Username and Password ) from users with View or Edit roles  

[ozkanaltas · Accepted solution]

Hello @aliben ,

If your user has edit permission you can't hide the password from them. But if your user just has view permission, FortiPAM doesn't show the password to them.

[Bjay_Prakash_Ghising]

Hi @ozkanaltas 

Can you confirm it once again. If view permission allow you to hide password of the secrets. 

Edit:

Users with the following permission can view secret passwords on the GUI:

• Owner

• Edit

• View (Only for users with roles where View Encrypted Information is enabled)

So, role with "View Encrypted Information " disabled can't see the password of the secret.

[ozkanaltas]

Hi @Bjay_Prakash_Ghising ,

Yes,sure. 

For example, this user has just "view" permission for this secret. User can't edit or view passwords.

But if I give edit permission to this user. Users can view and edit passwords. 

There is one important point. Your user role should be Standart User should not Power User or Administrator. 

[Bjay_Prakash_Ghising]

Understood. Thanks @ozkanaltas for sharing.