Integrating with CyberArk to Secure Application User Accounts

You can integrate with CyberArk to secure the passwords of the CommCell user accounts and the application user accounts except the domain service accounts.

Before You Begin

Gather the following information:

• Command Center hostname

• Username and password of the application user account

• Username and password for the CommCell user account that has user management permissions to CyberArk using CommCell user account platform. The CommCell user account should have the following permissions:

  • Administrative Management permission at CommCell level under Global Permissions

  • Agent Management permission at CommCell level under Client Permissions

Procedure

1. Log on to your CyberArk platform.

2. Access the following URL to download the Commvault Application platform package from the CyberArk Marketplace:

   https://cyberark-customers.force.com/mplace/s/#a352J000000kwnQQAQ-a392J000001eK7GQAU

3. Import the package to the CyberArk platform.

   For instructions, see Import a Platform Package.

   The Commvault CommCell package appears as Commvault Application Usage in the Service Account Platforms tab.

4. To secure the application user accounts of an application, complete the following steps:

   1. For the application you want to manage (for example, Windows Domain Account), add CommvaultApplication as usage.

      For instructions, see Activate and Deactivate Platforms.

   2. For the application account in your CyberArk platform, add a usage account under Commvault Application Usage.

   3. In the Address box, enter the Command Center access URL.

   4. In the Username box, enter the username of application user account.

   5. To the added usage account, associate a CommCell user account to connect to Commvault to change passwords for the application accounts.

      For more information, see Managing Service Accounts.