Skip to main content


         This documentation site is for previous versions. Visit our new documentation site for current releases.      
 

Using Pega Access to control integration behavior

Updated on October 19, 2022

Use Pega Access to limit the amount of information that you store locally.

When a credential request is made and the API Group value is not stored locally, a request is made to BeyondTrust to retrieve the API Group value from the Pega Access asset on the server. If successful, the credential request continues to be processed using the API Group value returned. If not, the credential request fails.

Note: If your security requirements do not permit using Pega Access, use the CredMgrUI.exe utility to store the required BeyondTrust API groups and BeyondTrust Runas users locally.

Enable the UseCurrentUserForASO and UseCurrentUserForCredStore attributes to control the Runas user that requests application credentials from the ASO Manager or the Credential Store, respectively.

  1. Open BeyondTrust Password Safe.
  2. Enable the appropriate options for your security needs:
    • If you enable the UseCurrentUserForASO option, requests for credentials that are made to the ASO Manager use the current logged-in user instead of the Runas user who is specified in the CredentialManagerConfig.xml file.
    • If you enable the UserCurrentUserForCredStore option, requests for credentials made to the Credential Store are made with the current logged-in user instead of the Runas user who is specified in the CredentialManagerConfig.xml file.
    Note:

    If the current user is a domain user, add the user to the user group in BeyondTrust as an Active Directory user.

    If the current user is logged into the computer locally, add the user to the user group in BeyondTrust as a BeyondTrust user and format the name as username/machinename.

  3. Save your selections and exit BeyondTrust Password Safe.

Have a question? Get answers now.

Visit the Support Center to ask questions, engage in discussions, share ideas, and help others.

Did you find this content helpful?

Want to help us improve this content?

We'd prefer it if you saw us at our best.

Pega.com is not optimized for Internet Explorer. For the optimal experience, please use:

Close Deprecation Notice
Contact us