Creating Temporary Privlledged Accounts
Hello,
In reviewing the feature set for PMP, I understand the functionality exists to check out a credential for a limited time and then have PMP reset the credential afterwards. Can PMP also go so far as to create a temporary/one-time use account for admin access to Windows systems? My ideal workflow would allow an automated process to authenticate to PMP, submit a request for an elevated (local admin) account on a given managed server, have PMP give credentials for the script to carry out executive functions, then have PMP remove the account from the system.
Is such a workflow possible? What are the language options for automating PMP actions (my org uses PowerShell heavily for most Windows activity).
Thanks for the help and guidance!
David
In reviewing the feature set for PMP, I understand the functionality exists to check out a credential for a limited time and then have PMP reset the credential afterwards. Can PMP also go so far as to create a temporary/one-time use account for admin access to Windows systems? My ideal workflow would allow an automated process to authenticate to PMP, submit a request for an elevated (local admin) account on a given managed server, have PMP give credentials for the script to carry out executive functions, then have PMP remove the account from the system.
Is such a workflow possible? What are the language options for automating PMP actions (my org uses PowerShell heavily for most Windows activity).
Thanks for the help and guidance!
David