Keeper-Security / Commander

Keeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.
https://www.keepersecurity.com/commander.html
MIT License
189 stars 74 forks source link

DR-765 Change code for Discovery enforcement #1316

Closed jwalstra-keeper closed 1 month ago

jwalstra-keeper commented 1 month ago

To enable Discovey ...

https://dev.keepersecurity.com/console/dev2/#login

once logged in, navigate to Admin -> Roles
find the role that belongs to the user you're using
click on Enforcement Policies button
click on Privileged Access Manager tab (left side menu panel)
at the very bottom, you should see the Discovery enforcement

This enforcement permission via requests to the gateway. There are still commands in Commander that can be run by any person, which we may need to lock down.