Secure users

What are secure users?

In EPM Cloud for Linux, a secure user is a name with an associated credential, used to sign into one or more endpoints.

What is the $submituser$ account?

The $submituser$ is a special user account created to accommodate scenarios where you want to run PB shell programs that initialize using submituser.

Assigning $submituser$ as the run user for a role ensures the requested command runs as the submit user without specifying the request user (pbrun -u).

Add a new secure user

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. Click > Endpoint Privilege Management for Linux > Policy.
   The Role Based Policy page displays.
3. Click the Who tile.
   The Users page displays with a list of users.
4. Click Add User/Group > Secure User.
   The Secure User panel slides out on the right.
5. Click the Enable user toggle.
6. Enter a user name and description.
7. Click Save Changes.
   A confirmation message displays and the user is added to the list.

Edit a user name and description

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. Click** > Endpoint Privilege Management for Linux > Policy.**
   The Role Based Policy page displays.
3. Click the Who tile.
   The Users page displays with a list of users and groups.
4. Locate the user you want to modify in the list.
5. Click the user name you want to modify.
   The Secure User panel slides out on the right.
6. Edit the user name and/or description.
7. Click Save Changes.
   A confirmation message displays and the user is updated.

Edit a user's details

You can update user account information such as the name, description, and email address.

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. Click > Endpoint Privilege Management for Linux > Console Access.
   The Console Access page displays.
3. Locate the user you want to update.
4. Click the user's Edit icon.
   The User Details page displays.
5. Edit the first name, last name, description, and/or email address.
6. Click Save User.
   The updates save to the user's account.

Remove a role assignment from a secure user

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. Click > Endpoint Privilege Management for Linux > Console Access.
   The Console Access page displays.
3. Locate the user to whom you want to remove a role assignment.
4. Click the user's Edit icon.
   The User Details page displays.
5. In the left menu, click Roles.
6. Deselect the role(s) you want removed from the user.
   The selected role(s) automatically unassign from the user, and a success message displays.

Add a secure user to a group

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. Click** > Endpoint Privilege Management for Linux > Policy.**
   The Role Based Policy page displays.
3. Click the Who tile.
   The Users page displays with a list of users and groups.
4. Locate the group you want to modify in the list.
5. Click the group name.
   The Secure Group panel slides out on the right.
6. At the bottom of the list, in the blank Username field, enter the user name of the user you want to add to the group.
7. Click Save Changes.
   A confirmation message displays and the group updates with the user added.

Remove a secure user from a group

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. Click** > Endpoint Privilege Management for Linux > Policy.**
   The Role Based Policy page displays.
3. Click the Who tile.
   The Users page displays with a list of users and groups.
4. Locate the group you want to modify in the list.
5. Click the group name.
   The Secure Group panel slides out on the right.
6. Locate the user name in the list.
7. Click the Delete icon next to the Username field.
8. Repeat for any additional users you want to remove from the group.
9. Click Save Changes.
   A confirmation message displays and the group updates with the users removed.

Delete a secure user

❗️

WARNING

Deleting a user is an unrecoverable operation.

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. Click** > Endpoint Privilege Management for Linux > Policy.**
   The Role Based Policy page displays.
3. Click the Who tile.
   The Users page displays with a list of users.
4. Locate the user you want to delete.
5. Click the user name.
   The Secure user panel slides out on the right.
6. Click Delete User.
   A confirmation message displays.
7. Click OK.
   The user is deleted and the list updates.