Grant temporary access to an entry in Devolutions Server

The Temporary Access feature allows users to request a temporary elevation of their permissions for a specific entry. Approvers can grant Temporary Access without request from a user and even if the user already has access.

Configure temporary access

The first step is to ensure that the vault, folder, or entry allows for temporary access.

1. Go to the properties of the vault, folder, or entry.
2. Navigate to Security.
3. Under the Temporary access menu, select Root (Allowed), Inherited (Allowed), or Allowed.
4.  Select who can authorize temporary access requests for this entry under the Authorizers drop-down menu.
5. Click Update to save and close the window.

Grant temporary access

1. In the Navigation pane of Devolutions Server, select the entry you want to grant access to.

2. Click on More, then select Grant temporary access.

   

3. You can view the Entry's dependencies such as linked credentials and VPNs.

   Note that linked entries must be in the same vault. Credentials with PAM linked to regular vaults are not included.

4. Choose User and Access duration in the Grant Temporary Access window.

5. Give view password/execute rights or specify permission sets.

6. Click on Set custom time frame if you need to grant access for a specific period of time and write a short Message to the user explaining why you grant access.

7. Click Grant Access to close the window.