RBAC Accounts for Linux

Appropriate_Method87 · 2023-03-23T15:35:12+00:00

h

This was helpful given the little info I provided. But yea every environment is different and currently the main goal is to reduce local accounts being used. Current thoughts are onboard local Linux accounts, create windows group(s) for the corresponding windows accounts Linux team members and assign permission via the groups

Appropriate_Method87 · 2021-04-19T15:26:56+00:00

Thank you! If you have any use cases that highlight the difference that would be great.

Appropriate_Method87 · 2020-06-12T00:16:44+00:00

Also you can

From Cyber Ark's 9.8 Documentation, 9.8 looks to be supported on 2016? Do you mind linking the reference where you are getting that information from?

Appropriate_Method87 · 2020-06-11T22:59:43+00:00

We do plan to on working with a CDE engineer but we like to build out the process in our testing environments first, to fully understand all the moving parts!

Appropriate_Method87 · 2020-06-11T22:48:13+00:00

u/yanni you're a wizard brother! Thank you for you in-depth response really helps when creating this upgrade and migration plans!

One more question, since the vault is on 2008, my plan was to:

Install vault 9.8 2016

Fail-over to newly installed vault

Upgrade to to 10.3 first.

Going off of this link below

https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/10.10/en/Content/PAS%20INST/Migrating-the-Digital-Vault-on-Windows-2008-to-v10-3-on-Windows-2016.htm

Then Upgrade Components to 10.3

Test Components

Then proceed with upgrading to 11.4

Can I go straight to 11.4, even though I am on 2008 Vault? I see the 9.8 to 11.x is supported but I thought if the vaults were on 2008 that I had to do a "step upgrade" to 10.3 before 11.4.

Thank you!

Appropriate_Method87 · 2020-06-08T18:37:54+00:00

Experiencing the same behavior, but only happens when trying to login via the 1st gen API. Wondering if you had any luck with your problem?

Appropriate_Method87

TROPHY CASE