Keycyte PAM 3.2 · Administrator Guide
Resource Rules
A resource rule records whether a user is approved to use a server or an account during a time window. Access requests from the Client Panel create resource rules automatically; administrators can also create rules directly, for example to grant pre-approved access for a maintenance window.
Resource rules take effect only for servers and accounts whose server role or password role has Approve selected. For other servers and accounts, the roles alone decide access.
To open the page, select Access Control > Resource Rules. A MASTER sees all rules; an ADMIN sees the rules for which the ADMIN was notified as an owner.
Rule List
| Column | Description |
|---|---|
| (icon), Type | Server or Account. |
| Object | Name of the server or account. |
| Portal User | The user that the rule applies to. |
| Request Date | When the user submitted the request. Empty for rules created by an administrator. |
| Start Time, End Time | The time window of the rule. |
| Action | State of the rule. See the table below. |
| Reason | The reason that the user entered in the request. |
| Action | Meaning |
|---|---|
allow | Approved. The user can use the object between Start Time and End Time. |
inactive | Not decided yet. Pending requests have this state and appear in the notification bell. |
deny | Not approved. |
reject | Rejected with Reject in the notification bell. |
Search Keyword filters the list by object, type, user, action and reason.
Creating a Resource Rule
Before you begin, make sure that you have the Add permission for Resource Rules.
To create a resource rule:
-
Select Access Control > Resource Rules.
-
Click Add. The Access Control dialog opens.
-
Fill in the fields:
Field Description Type Server or Account. Server / Account The server or account that the rule is for. The field matches the selected type. Portal User The user that the rule applies to. Start Time Start of the time window. Required. End Time End of the time window. Required. Action allow,denyorinactive. Selectallowto approve. -
Click Save.
If the user needs both a server and an account that require approval, create a rule for each.
Changing or Deleting a Rule
To change a rule, click the edit button in its row, change the fields and click Save. Changing Action to allow approves a pending request; the requester receives an e-mail. Reason shows the user’s reason and cannot be changed. You need the Edit permission for Resource Rules.
To delete a rule, click the delete button in its row and confirm. You need the Delete permission for Resource Rules.
Tip
To withdraw an approval before its end time, change Action to deny or delete the rule. New connections are refused from then on.