Privileged Access

Environments - [Select Environment] - Audit Review - Privileged Access

The Privileged Access Report provides a list of users with access to Administration controls, pages, or other defined processes.

Pages classified as Privileged Access may not always contain PII/PCI data but can be administrative or functional-type pages. [Security Pages, Approval Pages, Process Pages]

Summary

Each Privileged Access Control displays a summary of the following:

• Users - Number of Users with access.

• Remediate - Number of Users with access pending removal.

• Not Reviewed - Number of Users pending review.

How To Review Users with Privileged Access:

1. Navigate to Environments, and select an Environment.

2. Select 'Audit Review' and click the Privileged Access Report.

3. Use the dropdown to select an existing Audit Project or Create New.

4. Click the 'View' icon to display a list of users with access to the control. *Filter using the various tabs to customize the report view.*

5. Under the Decision Column, click Approve or Deny.

If Privileged Access is marked as 'Deny,' it will display under the 'Remediate' column until a security administrator removes the access.

Reports

Privileged Access Reports can be created and shared with any user. *A Sentinel account is not required to view or download the report.*

• Generate On-Demand Reports for immediate use.

• Schedule Reports to automatically create and distribute at a set interval.

Audit Reports are available to View Online (URL), Save as PDF, or Download as CSV.

Generate On-Demand Privileged Access Reports:

1. Navigate to Environments and select an Environment.

2. Select 'Audit Review' and click the Privileged Access Report.

3. Click 'Create Report.'

4. Select an existing Audit Project or enter a Custom Period. *The report will only include Audit Review decisions within the selected period.

5. Enter a Report Title (Name).

6. Click 'Generate Report' and then click 'View Report.'

   

Schedule Privileged Access Reports:

1. Navigate to Environments and select an Environment.

2. Select 'Audit Review' and click the Privileged Access Report.

3. Click 'Create Report' and select the 'Add New Schedule' tab.

4. Enter one or more Recipient Emails, separated by a comma.

5. Select an existing Audit Project. *The report will only include Audit Review decisions within the selected period.

6. Select the Interval (distribution frequency) and enter a Time/Day.

7. Click 'Save.' *Scheduled reports will appear under the 'Scheduled' tab.

   

Settings

Sentinel is delivered with Default Privileged Access Controls for each module. All controls are fully configurable within the Privileged Access Settings.

Add Privileged Access Controls:

1. Navigate to Environments and select an Environment.

2. Select 'Audit Review' and click the 'Privileged Access' Report.

3. Under the 'Settings' tab, check the box to activate a Page as a new control.

   *Click the Settings Icon to view the selected pages that will be tagged on the Navigation Menu and appear in Audit Reports.

4. Filter to the 'Add by Page' or 'Add by Component' tabs to customize the view.

Select the 'Activate Default Controls' button to enable the Sentinel-delivered controls.