Free Preparation Discussions
MENU
CyberArk PAM-DEF Exam - Topic 7 Question 58 Discussion
Topic #: 7
As long as you are a member of the Vault Admins group you can grant any permission on any safe.
The Vault Admins group is a predefined group that is automatically created during the installation or upgrade of the Vault. This group has all possible permissions in the Vault, and can create and manage other users, groups, platforms, policies, safes, and accounts. However, this group is not automatically added to every safe in the Vault, but only to some system safes that are used for administrative purposes. Therefore, being a member of the Vault Admins group does not guarantee that you can grant any permission on any safe, unless you are also a member or an owner of that safe. To grant permissions on a safe, you need to have the Authorize safe members authorization on that safe, which allows you to add or remove users or groups as safe members, and assign or revoke their authorizations. Alternatively, you can use the Administrator user, which is a predefined user that is a member of the Vault Admins group, and has all possible permissions on any safe in the Vault.Reference:
Safe member authorizations
Shannon
2 months agoJaleesa
2 months agoNancey
2 months agoIlona
3 months agoNathalie
3 months agoAnnette
3 months agoDorothy
3 months agoArlen
4 months agoLorrie
4 months agoCecily
4 months agoTammi
4 months agoNaomi
4 months agoMelita
5 months agoNoemi
5 months agoKing
10 months agoMarvel
10 months agoKeena
9 months agoIluminada
9 months agoJennifer
9 months agoLarue
9 months agoDominque
10 months agoCarlene
10 months agoBenedict
10 months agoDusti
9 months agoCecily
9 months agoGaston
9 months agoKerry
10 months agoIlona
10 months agoIndia
10 months agoHarley
10 months agoKing
11 months ago