Authorize assets and asset accounts for a user - Bastionhost

Prerequisites

You have created a Bastionhost user. For more information, see Manage users.
You have added assets to Bastionhost and created asset accounts. For more information, see Add a host, Manage host accounts, and Manage databases.

Log on to the Bastionhost console. In the top navigation bar, select the region where your Bastionhost instance is located.
In the list of Bastionhost instances, find the target instance and click Manage.
In the navigation pane on the left, choose Users > Users.
On the Users page, find the user and click Permission on Host in the Actions column.
On the Managed Hosts tab, click Permission on Host.
In the Permission on Host panel, select one or more hosts and click OK.

Log on to the Bastionhost console. In the top navigation bar, select the region where your Bastionhost instance is located.
In the list of Bastionhost instances, find the target instance and click Manage.
In the navigation pane on the left, choose Users > Users.
On the Users page, find the user and click Permission on Database in the Actions column.
On the Managed Databases tab, click Permission on Database.
In the Permission on Database panel, select one or more databases and click OK.

Log on to the Bastionhost console. In the top navigation bar, select the region where your Bastionhost instance is located.
In the list of Bastionhost instances, find the target instance and click Manage.
In the navigation pane on the left, choose Users > Users.
On the Users page, find the user and click Authorize Application in the Actions column.
On the Authorized Applications tab, click Authorize Application. In the panel that appears, select one or more applications and click OK.

Log on to the Bastionhost console. In the top navigation bar, select the region where your Bastionhost instance is located.
In the list of Bastionhost instances, find the target instance and click Manage.
In the navigation pane on the left, choose Users > Users.
In the user list, click the name of the target user.
On the tab for the target asset, click No accounts found. Click here to authorize the user to manage the accounts of the asset group..
In the panel that appears, select the asset account and click Update.

Note
If no accounts are available, click Create Host Account to create an asset account.

To authorize multiple asset accounts for a user in a batch, perform the following steps:

Log on to the Bastionhost console. In the top navigation bar, select the region where your Bastionhost instance is located.
In the list of Bastionhost instances, find the target instance and click Manage.
In the navigation pane on the left, choose Users > Users.
In the user list, click the name of the target user.
On the tab for the target asset, select the assets. At the bottom of the list, choose .
Enter the account name and click Update.

Note
You can specify only one account name per batch operation.

To follow the principle of least privilege, remove assets from a user's authorized list if they no longer need O&M access to those assets.

Log on to the Bastionhost console. In the top navigation bar, select the region where your Bastionhost instance is located.
In the list of Bastionhost instances, find the target instance and click Manage.
In the navigation pane on the left, choose Users > Users.
In the user list, click the name of the target user.
On the tab for the target asset, select the assets to remove and click Remove at the bottom of the list.
In the confirmation dialog box that appears, click Remove.

To remove authorized asset accounts from a user in a batch, perform the following steps:

Log on to the Bastionhost console. In the top navigation bar, select the region where your Bastionhost instance is located.
In the list of Bastionhost instances, find the target instance and click Manage.
In the navigation pane on the left, choose Users > Users.
In the user list, find the target user and click the username to go to the details page.
On the Managed Hosts, Managed Databases, or Authorized Applications tab, select the assets. At the bottom of the list, choose .
Enter the account name and click Update.

Note
You can remove only one account name per batch operation.