Employee off-boarding - list of passwords

Community Feedback
1

Hi,
for a employee off-boarding we need a list of all passwords, which are shared with this user. Is there a possibility to do something like that?

Target: Identify all passwords which were accessible of this user - finally we’re able to deactivate the related user accounts.

Thanks in advance!

2

Hello,

There is a couple of feature advanced reports, and password expiry that are planned to help with this use case. You can find the specifications for the later there:

3

Thanks for your reply - that looks really great. But this features are not implemented yet, right?
We are using the pro with ~20 users and I can’t see this features.

When will be the estimated finishing date of this features?

But for now, I need another solution to get a list of all shared passwords of a user. A list with the password titles would be fine. Is it possible to read them from the MySQL database?

4

Hi @gindoc

These features are planned for 2022. In the meantime, you can get these infos from database.

List of passwords currently shared or owned by user:

SELECT
       r.name,
       r.uri
FROM
       resources r
       INNER JOIN permissions p ON r.id = p.aco_foreign_key
       INNER JOIN users u ON u.id = p.aro_foreign_key
WHERE
       u.username = "user@domain.tld";

You can also get a list of passwords accessed by the user:

SELECT
       al.created,
       u.username,
       r.name,
       r.uri,
       r.deleted
FROM
       action_logs al
       INNER JOIN actions a ON al.action_id = a.id
       INNER JOIN users u ON u.id = al.user_id
       INNER JOIN secret_accesses sa ON sa.created = al.created
       INNER JOIN resources r ON sa.resource_id = r.id
WHERE
       a.name = "ResourcesView.view";

Best,

1 Like