http://www.thycotic.com/forums/messages.aspx?TopicID=402 Thycotic Community - Secret Server - Staging Area - Messages en-us http://blogs.law.harvard.edu/tech/rss Jitbit AspNetForum Fri, 02 Dec 2011 23:56:01 GMT Fri, 02 Dec 2011 23:56:01 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=402
Another option is to have a general folder and then don't have the Secret inherit permissions when you put it there - rather put granular permissions on it. In this way, you can "give" the Secret to another team by giving them Owner and relinquishing all permissions from your own team. Then send them a link to the Secret (or send them the secretid). This way you can be sure that only the right folks see the Secret during the transition.]]> Fri, 02 Dec 2011 23:56:01 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=402
We had an interesting situation yesterday.

Our DBAs requested a new AD account to be created.
Our security team created the new Active Driectory account and added it to Secret Server in their folder.
Thye wanted to transfer that secret to the DBA folder since the DBAs will manage that account.
But security team can't see the DBA folder and the DBAs can't see the security folder so neither can move it to its new folder.

My only solution is to create a "Staging Area" folder that everyone can see where the secret can be moved to by security and moved out by the DBA team.

Anyone got any other suggestion?]]> Wed, 30 Nov 2011 04:06:11 GMT