資格情報ストア

注:

利用可能な機能は、使用するクラウド製品によって異なります。詳しくは、「 機能の提供状況」をご覧ください。

A credential store is a named location within a secure store, such as CyberArk®, from which you can store and retrieve sensitive data such as Robot credentials and credential assets when needed. Orchestrator supports the use of multiple credential stores at tenant level, and provides built-in support for Azure Key Vault, CyberArk Secrets Manager, HashiCorp Vault, Thycotic Secret Server, BeyondTrust, AWS Secrets Manager, and Google Secret Manager. It also provides the necessary architecture to add and manage third party secure stores, if desired.

For Automation Cloud, Test Cloud, and Automation Cloud Dedicated, the Credentials page is split in two views: Stores and Proxies.

• The Stores page allows you to create new stores, view existing stores and their properties, and delete any current credential store. Note that the native Orchestrator Database store is automatically created, will always appear first in this list and be the Default store for all new tenants.
• The Proxies page allows you to create new proxies for your own custom credential stores, view a list of existing proxies, edit, and remove them.

For Automation Cloud Public Sector and Test Cloud Public Sector, the Stores page allows you to create new stores, view existing stores and their properties, and delete any current credential store. Note that the native Orchestrator Database store is automatically created, will always appear first in this list and be the Default store for all new tenants.

注:

Orchestrator 管理者は、テナントに対して資格情報ストア機能を有効化する必要があります。 詳細についてはこちらをご覧ください。

注:

Managing credential stores in Orchestrator requires specific privileges because credential stores contain sensitive authentication data used by automations. To create, modify, or delete credential stores, a user must have Settings permissions (View, Edit, Create, and Delete). These permissions are included in the Orchestrator Administrator role. If the Settings permissions are removed from a role, the user will no longer be able to manage credential stores.