Multi-User Access Accounts

The Multi-user Access Account feature allows organizations to manage permissions for multiple users accessing the same account. This feature is especially useful for shared administrative or privileged accounts, ensuring secure and auditable access for all users.

Steps:

  1. Creating a Multi-user Access Account:

    • Log in as an admin and navigate to the **Privilege Access Management **section.

    • Click Create Shared Account to create a multi-user account

    • Provide the required account details as outlined below:

      • Account Name: Choose a name for your multi user account
      • Description: Briefly describe what the account is for
      • MFA Option: select the MFA option you would want this multi-user account to be accessed with
      • Access Email: Now enter the full account you want to be used by multiple persons.
      • Access Group: This dropdown would contain the group(s) of the access email. This means that the access email must have been assigned to a group as the resource intended to be accessed with the access email would be in the group.
      • Select the group with the target resource
      • Multiple Access User: select the users that would be accessing the account
      • Expiry Date: Select the expiry date of the Multi Access set-up. On this date, the multiple access users will cease to be able to access resources using the Access Account
      • Click on ‘save’ and the Multi user Account is created
      • Once the account is created all the users involved will get an email informing them of their new shared account as well as the credentials needed for access
        📝 Note that you have to enter the full email address of the Access email for the search to happen.

      📝 Also note that the access email selected must have onboarded with the biometric option you selected for the account to be valid for Multi-access use

      📝 If the users selected to use the Access email are not onboarded with the right biometrics, they will not be able to access resources using the access email account

  2. Viewing details of the Multi-user Account:

    • Once the multi-user account is created, go to the table that has the list of all the multi-user accounts.

    • Click View Details on the action button of each item on the list

    • In addition to viewing the details of the account, the functionalities shall be available:

      • Edit the Multi Access Account
      • Deactivate the account (Account will be temporarily disabled and users assigned will be unable to use the access account)
      • Delete the Account
      • Reset the Password
      • View logs for the Multi Access account
  3. Modifying Access or Removing Users (Edit):

    • To remove a user’s access, click on the Edit Multiple Access Account option upon viewing the details of the account
    • You can modify all entries present during the creation of the account
    • Click on Save to save the modifications

    📝 If there is a change on the multiple access users details (addition or removal) the password is automatically reset and all the users advised accordingly

  4. Login Process for Multi-user Accounts:

    • Users assigned to the account will log in using the following credentials. (Access email, shared password and their personal biometric as configured)
    • Upon successful login, users will have access to the resources assigned to the Access email
  5. Auditing Multi-user Activity:

    • The platform logs all activities performed by users within a multi-user account.

    • To review actions, go to Audit Logs within each of the accounts.

    • Here, you will find a history of user logins, changes made, and any critical actions performed.

    • Filter logs by user, date, or action type to quickly identify relevant activities.

  6. Resetting Password for Multi user Account:

    • To reset password select the Reset Password option upon viewing the details of the Multi User account

    • Use the Auto generate option to send the users auto-generated password

    • Use the manual option to enter the exact password

    • Upon clicking on Reset the new password will be advised to all the Multiple access users for the specified account.