Approval for Password Vault or Remote terminal is Global per administrator group. There may be a case, such as when a team requires direct Remote Terminal Access to one group of UAT servers but Approved Remote terminal Access to another group of PRODUCTION servers. In such cases establish 2 Active Directory groups, one configured for each type of access, and make your team members of both. After they logon, the Administrator Role at the top of the screen becomes a selection list.
N.B. If the end user elects to change Administrator role when they are on a Web page that is not authorised as the other role, they will be logged out of the system. Therefore it is important when configuring edge cases that all Administrator Roles have similar access, to give the end users seamless experience.
If a recursive loop of group membership is found, an Event warning is raised on the ForestSafe server. Companies may wish to forward this warning to their operations team.
