Event controls (triggers, scope and scripting)

[AngeloAlan]

Dear Passwordstate Team,

 

I hope this message finds you well. We’ve significantly enhanced our operations using Passwordstate and appreciate the solid work you've put into making it an excellent password management solution!  Before you dive into the commentary and request below a simple question:  Can we do this already in Passwordstate or should this be an enhancement/feature request?  If there is a more formal process such as submission of a ticket for feature enhancement, please let me know and I will get that started.

 

Our DBA team lead shared some thoughts on a possible new feature that would greatly enhance the flexibility of Passwordstate for us and potentially others as well—script execution on certain password events. This feature would enable users to automate additional actions or processes triggered by specific events, allowing for greater integration with other systems and tools. For example, by running a script upon password change, users could automatically update related records in external systems, send notifications, or perform other custom actions tailored to their organization's needs.

 

Here are some thoughts:

Event Triggers: It would be great if users could choose specific events (like password changes, resets, etc.) to trigger script execution.

Event Scope: Being able to trigger system wide down to individual password events would be very useful.

Script Configuration: Having a user-friendly interface to configure scripts would be key. Options for script location, parameters, and authentication details would make it versatile.

Logging and Notifications: Robust logging to track script execution results and optional notifications would add a nice touch for administrators.

Security Considerations: Ensuring secure script execution is a priority. Options to specify execution environments or access limitations would be essential.

Documentation: A detailed guide with examples would be immensely helpful for users navigating this feature.

 

We believe this addition could make Passwordstate an even more powerful tool for organizations with diverse security needs. What are your thoughts on this?

Thank you for considering our suggestion. I look forward to the continued success and improvement of Passwordstate.

[support]

Hi Alan,

 

Thanks for your request.

 

We don't know if the following would fulfill all your requirements, but are you aware you can currently add "dependency" scripts to password records - so when a reset occurs, it can trigger the execution of dependency script?

 

If you have a look in our PAM manual, section "18 Password Reset Dependency Records", this might give you some idea of what's possible - https://www.clickstudios.com.au/downloads/version9/Passwordstate_Privileged_Account_Management_Manual.pdf

 

Let us know if you think you need any additional functionality on top of this.

 

Regards

Click Studios

[AngeloAlan]

We're already in "many people on vacation" mode for the holidays, but I will bring this up with the DBA team when they are all back to see how much of their initial request we can fulfill that way.  I appreciate the pointer!   Happy/Merry Christmas!