Reference
Privileged Access Management glossary
Terms used in Privileged Access Management and its documentation.
Applies to Privileged Access Management as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.
Terms used in Privileged Access Management and its documentation.
| Term | Meaning |
|---|---|
| Vault | CyberArk's encrypted store for privileged passwords, keys and their access rules. |
| Safe | A container in the vault that groups related accounts and has its own members and permissions. |
| Safe owner | The person at your institution who approves access to a safe's accounts and certifies its membership. |
| Platform policy | The CyberArk settings for a type of target system, including how and how often its passwords are changed and verified. |
| Rotation | CyberArk changing an account's password and then verifying that the new one works. |
| Rotation exception | An account whose password change or verification failed and is being worked back under management. |
| Approved exception | An account that cannot be rotated or brokered, recorded with a compensating control your institution accepted. |
| Brokered session | A connection to a target made through CyberArk so the administrator never sees the password, usually recorded. |
| Dual control | A rule that requires a reason and a safe owner's approval before an account is released. |
| Configuration baseline | The documented safe design, policies and approval rules your institution approved, which Moraph reviews the running configuration against. |
Was this page helpful?
Report a problem with this page
Need help with your own setup rather than this page? Raise a support ticket.