Actu
Delinea Introduces New Granular Privileged Access Controls on Servers
November 2022 by Marc Jacob
Delinea announced the latest release of Cloud Suite, its solution that controls privileged access and authorization for on-premise and cloud servers. A new granular privilege elevation workflow allows users to request elevated privileges to execute specific commands or command sets that require full administrator rights. New functionality also enables administrators to assign privileged roles on Linux servers with more detailed control, helping to ensure that productivity does not compromise security.
According to the 2022 VMWare Global Incident Response Threat Report, lateral movements are detected in 25% of all attacks, with cybercriminals abusing tools such as host scripts, file storage, and synchronization. Cloud Suite empowers customers with robust capabilities that help contain the impact of a potential breach and greatly reduce the likelihood of lateral movements. For example, IT teams can consolidate identities across enterprise directories and cloud providers including Active Directory, Azure AD, AWS, and Google Cloud, simplify authentication, and apply granular authorization controls to implement least privilege best practices, enhancing security postures.
More granular privilege elevation automation
Available now in public preview, privilege elevation workflows give users a way to request access to commands that require elevated privileges when they don’t have that access, and they are enabled for one, multiple, or all commands on the system. The new workflow allows users to request elevated privileges only for specific commands or command sets without having to request administrator access to all commands every time. This functionality supports the principle of just-in-time and just-enough access at a more granular level.
Finer controls on Linux servers
The Cloud Suite update also includes profile mapping for Unix roles that ensures privileged access controls can be managed as sets of enrolled Linux servers rather than globally, for a more targeted privilege authorization. This feature helps minimize the risk of over-privileged roles and promotes least privilege best practices.
