Asset Groups | PRA Pathfinder

What are Asset Groups?

Asset Groups are organizational tools that allow administrators to manage and group Assets, granting members varying levels of access to those items.

An Asset Group is a way to organize Assets, granting members varying levels of access to those items. Users are assigned to Asset Groups from this page or from the Users & Security > Group Policies page.

How are Asset Groups useful to my organization?

Asset Groups enhance security and efficiency by organizing Assets and controlling access to them. Administrators can assign specific permissions to team members, ensuring appropriate access to remote systems while maintaining compliance and safeguarding sensitive data.

How do I access the Asset Groups page?

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. From the main menu, click Privileged Remote Access > Asset Management.
   The Asset Management page opens and the Jump Clients tab displays by default.
3. Click the Asset Groups tab.
   The Asset Groups tab displays.

The Asset Groups page

4. Add: Adds a new Asset Group.

5. Filter: Search on Name or Comments fields.

6. Asset Groups columns- The list of Asset Groups columns.

   Asset Groups columns

   • Name: Unique name of the group.
   • Code Name: Set a code name for integration purposes. If you do not set a code name, one is created automatically.
   • Comments: A brief description of the Asset Group.

7. Account Group options: You can edit or delete an Asset Group.

Add a new Asset Group

1. From the Asset Groups page, click the Add button. The Add Group page displays.
2. In the Name field, type a unique name. This name helps when adding Assets to a group as well as when determining which users, and group policies are members of an Asset Group.
3. In the Code field, type a unique code for integration purposes. If this field is left blank a code is automatically created for you.
4. In the Comments field, type a comment. This summarizes the purpose of this Asset Group. For example, "An Asset Group for the Assessment team".
5. In the Group Policies section, this displays a listing of the group policies which assign users to this Asset Group. The policy memberships are located in Users & Security > Group Policies page.

Search Asset Groups

You can quickly find an existing group in the list of Asset Groups, by doing the following:

1. In the Search Asset Group textbox, type the name, part of the name, or a term from the comments. The resulting list filters all groups with a name or comment containing the entered search term. The list remains filtered until the search term is removed, even if the user goes to other pages or logs out.
2. To remove the search term, click the X to the right of the search box.

You can configure allowed users for the group by doing the following steps:

1. To add a user, search in New Member Name for users to add to this Asset Group.
2. Select the user's role in the New Member Role dropdown to set their permissions specific to Assets in this Asset Group.
3. You can select User's default to use the default Asset Roles set on the Users & Security > Group Policies page or the Users & Security > Users page. An Asset Role is a predefined set of permissions regarding Asset management and usage.
4. In the New Member Asset Policy field, select the appropriate policy.
5. Click Add.
6. Existing Asset Group users are shown in the table, along with their assigned role and how the role was granted. You can filter the view by entering a string in the Filter by name text box.
7. To edit a user's settings, click or to delete a user from the Asset Group, click .

ℹ️

The edit and delete functionality may be disabled for some users. This occurs either when a user is added by using a group policy or when a user's system Asset Role is set to anything other than the No Access permission.

You can click the group policy link to modify the policy as a whole. Any changes made to the group policy apply to all members of that group policy.

To add groups of users to an Asset Group, go to the Users & Security > Group Policies page and assign that group to one or more Asset Groups.

You can click the user link to modify the user's system Asset Role. Any changes to the user's system Asset Role apply to all other Asset Groups in which the user is an unassigned member.

You also can add the individual to the group, overriding their settings as defined elsewhere.

Edit an existing Asset Group

1. From the Asset Groups page, locate the Asset Group you want to edit.
2. Click .
   The Edit Group page displays.
3. Edit the necessary fields.
4. Click Save.

Delete an Asset Group

1. From the Asset Groups page, locate the Asset Group you want to delete.
2. Click .
3. Click Yes in the confirmation dialog.
   The Group name is successfully deleted.

Maintenance of duplicate Jump Clients

Create a duplicate Jump Client

1. From the Desktop Access Console, find the Jump Client you want to create a duplicate of.
2. Either select Copy on the toolbar above, or right-click on the Jump Client and select Copy.
3. Select an Asset Group. It must be the same Asset Group as the original.

4. Click OK.
5. The following dialog box displays:

6. Click Yes to create the duplicate Asset.