Free Preparation Discussions
MENU
CyberArk PAM-DEF Exam - Topic 7 Question 58 Discussion
Topic #: 7
As long as you are a member of the Vault Admins group you can grant any permission on any safe.
The Vault Admins group is a predefined group that is automatically created during the installation or upgrade of the Vault. This group has all possible permissions in the Vault, and can create and manage other users, groups, platforms, policies, safes, and accounts. However, this group is not automatically added to every safe in the Vault, but only to some system safes that are used for administrative purposes. Therefore, being a member of the Vault Admins group does not guarantee that you can grant any permission on any safe, unless you are also a member or an owner of that safe. To grant permissions on a safe, you need to have the Authorize safe members authorization on that safe, which allows you to add or remove users or groups as safe members, and assign or revoke their authorizations. Alternatively, you can use the Administrator user, which is a predefined user that is a member of the Vault Admins group, and has all possible permissions on any safe in the Vault.Reference:
Safe member authorizations
Shannon
4 months agoJaleesa
4 months agoNancey
4 months agoIlona
4 months agoNathalie
4 months agoAnnette
5 months agoDorothy
5 months agoArlen
5 months agoLorrie
5 months agoCecily
6 months agoTammi
6 months agoNaomi
6 months agoMelita
6 months agoNoemi
6 months agoKing
11 months agoMarvel
11 months agoKeena
10 months agoIluminada
10 months agoJennifer
10 months agoLarue
11 months agoDominque
11 months agoCarlene
11 months agoBenedict
12 months agoDusti
10 months agoCecily
10 months agoGaston
11 months agoKerry
11 months agoIlona
12 months agoIndia
11 months agoHarley
11 months agoKing
1 year ago