Vault Section
Vault
Here you can set up Domain Accounts as well as manage Local and Web Accounts for your tenant
Domain Accounts
For Elevated Access, identify accounts that will be used as the shared accounts for logging into this tenant
You can select the New button on the right to identify a new domain account.
Select the directory and the account(s). Make sure your appropriate user is synced in (And an admin as you'll be elevating into this account)
Select the password rotation frequency option at the bottom for this account.
Once completed, make sure the password rotates by selecting the Eyeball before attempting to utilize the Shared Account.
More information can be found here
Local Accounts
All local admins that have been identified from Evo Agent installations
Here you'll see all Local Administrator accounts that have been brought in via Evo Agent installations. They will only appear after an agent has been installed. For Elevated Access users, you have the option to rotate these passwords as well via the pencil option on the right.
Web Accounts
Accounts to manage Microsoft 365 instances (Azure Directories only)
You can create a new Web Account to access the selected tenant in Microsoft Office 365.
Requirements for Web Accounts (More information here):
- User must have the proper role permissions to access Web Accounts:
- Directories
- View Directories - Allows the admin to view the Directories page
- Groups
- View Groups - Allows the admin to view the Groups page
- Users
- View People - Allows the admin to view the People page
- Web Accounts
- Manage Web Accounts – This role will allow you to create and delete web accounts.
- Use Web Accounts- This role will allow you to check-in/check-out a web account.
- The user must belong to the user group associated with the web account.
- The user must have access to the tenant/customer.
- The user must have an Elevated Access License.
- Review the permissions from the Azure Sync article. Make sure the Enterprise Application has the right roles and grants to it or Web Accounts may not function correctly.
- Name your web account and assign it to a group (Needs to be created in advance).
- Select if you'd like to immediately Check Out the account upon creation
- Select if you'd like to delete the Web Account upon Check In (Just-In-Time)
- Select the role you would like the Web Account to have
Once you save the Web Account it will be available on screen and can be checked out only by users that are in the appropriate group that is tied to the Web Account.