CyberArk

PostgreSQL

Description

Manage PostgreSQL privileged accounts



Vendor

This platform is designed for remote account management for the following target:

VendorPostgreSQL
ProductPostgreSQL
Product Category

Database

Product Versions11.3



CyberArk

This platform works with the following CyberArk versions:

CyberArk Solution

Privileged Credentials Management 

CyberArk Product

Central Policy Manager (CPM)

CyberArk Versions9.1 or higher
Artifact Version1.0
Out of the Box

NO

Out of the Box in versions



Support & Certification

Support Level

CONTROLLED

Developed byCyberArk
Certification Level

TRUSTED

Connection MethodsODBC



Actions

The following table lists the supported management actions for this platform:

ActionSupportedPermissions
Verify

YES


Change

YES


Reconcile

YES


Delete

NO




Linked Accounts

The following linked accounts are in use by the plugin.

Reconcile Account

Supported

YES

Required

YES

Platforms

PostgreSQL

Permissions



Prerequisites

The following prerequisites are required on the machine that runs this plugin :

  • PostgreSQL ODBC Driver must be installed on the CPM.
  • The relevant ports must be opened between the PostgreSQL server and CPM server.



Installation

Import Platform

Do the following to import the platform:

StepHow To
Import the platform

See Add new platform topic in the Online Help Center or in the Privileged Access Security Implementation Guide.



Configuration

Platform Settings

Specify the following parameters at the platform level:

Parameter NameDescriptionDefault Value
ConnectionCommand

The connection command to use for connecting to the target machine. For example, if the target machine is a database, this parameter should contain a connection string.

Driver={PostgreSQL ODBC Driver(UNICODE)};Server=%ADDRESS%;[Database=%DATABASE%;]Uid=%USER%;Pwd=%LOGONPASSWORD%;[Port=%PORT%]
ChangeCommand

The command for changing passwords in the target machine. For example, if the target machine is a database, this parameter should contain an SQL statement. To ensure that these variables will be used as values and not as part of the command, when possible enclose them with quotation marks.

ALTER USER %USER% WITH PASSWORD '%NEWPASSWORD%';
ReconcileCommand

The command for reconciling passwords in the target machine. For example, if the target machine is a database, this parameter should contain an SQL statement. To ensure that these variables will be used as values and not as part of the command, when possible enclose them with quotation marks.

ALTER USER %USER% WITH PASSWORD '%NEWPASSWORD%';

For more information see: Databases that Support ODBC Connections