{"id":1123,"date":"2015-07-06T08:36:36","date_gmt":"2015-07-06T06:36:36","guid":{"rendered":"https:\/\/adm-adria.nevtron.si\/prod-18\/?p=1123"},"modified":"2018-05-15T14:56:55","modified_gmt":"2018-05-15T12:56:55","slug":"kako-upravljati-uporabnike-s-posebnimi-dovoljenji","status":"publish","type":"post","link":"https:\/\/adm-adria.si\/en\/2015\/07\/kako-upravljati-uporabnike-s-posebnimi-dovoljenji\/","title":{"rendered":"Kako upravljati uporabnike s posebnimi dovoljenji?"},"content":{"rendered":"<p class=\"fs16 fwb mb10\">Izvedba strategije omejenih dostopov do informacijskega sistema podjetja ali organizacije je kompleksna in \u010dasovno zahtevna naloga. IT oddelki zato za la\u017eje doseganje ciljev med sabo pogosto uporabljajo in delijo gesla z vrhovnim administratorskim dostopom. S tem pa je povezana cela vrsta te\u017eav. Primerno upravljanje nivojev dostopov ni ve\u010d le sistem za laj\u0161anje nespe\u010dih no\u010di vodij, temve\u010d postaja tudi zakonska zahteva.<\/p>\n<p>Podjetjem in organizacijam je lahko v veliko pomo\u010d robusten sistem za upravljanje z dostopi in administrativnimi pravicami. Ta mora nuditi preglednost potrebnih pravic, zmanj\u0161ati uporabo deljenih ra\u010dunov, vsebovati metodo za preverjanje privilegijev posameznih ra\u010dunov ter imeti metodo za nadzor uporabe teh pravic.<\/p>\n<p>V <a href=\"http:\/\/www.adm-adria.eu\/\" target=\"_blank\" rel=\"nofollow noopener\">ADM Adriji<\/a> nudijo re\u0161itev, zasnovano na napravi, na kateri te\u010deta dve programski opremi z enotnim upravljanjem prek spletnega vmesnika.<\/p>\n<p>Quest One Privileged Password Manager <strong>avtomatizira in zavaruje<\/strong> celoten proces izdajanja administratorskih ra\u010dunov potrebnih za izvajanje aktivnosti na posameznih sistemih. Sistem se dr\u017ei natan\u010dnega procesa za dodeljevanje in upravljanje z gesli (slika). Na primer, ko uporabnik zahteva povi\u0161ane pravice za opravljanje svojih nalog, je ta zahtevek odobren glede na pravila, dolo\u010dena v produktu, in potrditev odgovorne osebe. Sistem omogo\u010da tudi programske klice s katerimi je mo\u017eno zamenjati stati\u010dno zapisana gesla v programih in skriptah. Celotna re\u0161itev se lahko i<strong>ntegrira v obstoje\u010de okolje<\/strong> v podjetju (AD, LDAP).<\/p>\n<p>Quest One Privileged Session Manager omogo\u010da <strong>nadzor nad sejami<\/strong> vseh uporabnikov, ki se povezujejo na kriti\u010dne sisteme. Je centralno mesto za dodajanje in omejevanje dostopov, pregled aktivnih sej, snemanje vseh aktivnosti, obve\u0161\u010danje o preteku dolo\u010denih omejitev za trajanje sej (\u010dasovnih ali funkcionalnih) ter prekinjanje in zaklju\u010devanje aktivnih sej. Vse povezave potekajo prek QPSM posredni\u0161kega (proxy) stre\u017enika, ki poskrbi, da uporabniki nimajo direktnega dostopa do sistemov in so <strong>za\u0161\u010diteni pred gro\u017enjami<\/strong> (virusi, \u010drvi, direktni napadi, DOS napadi \u2026). Sistem omogo\u010da tudi avtomatsko prijavo brez poverilnic (uporabni\u0161kega imena in gesla). Vsaka aktivnost vklju\u010dno s premiki mi\u0161ke in vsi vnosi tipkovnice so <strong>posneti<\/strong> za kasnej\u0161i pregled.<\/p>\n<p>V <a href=\"http:\/\/www.adm-adria.eu\/\" target=\"_blank\" rel=\"nofollow noopener\">ADM Adria<\/a> omogo\u010dajo celovito re\u0161itev namestitve obeh programov. Nudijo vam predstavitev, teste, instalacije, implementacije, vzdr\u017eevanje sistemov, izobra\u017eevanje in svetovanje.<\/p>","protected":false},"excerpt":{"rendered":"<p>Izvedba strategije omejenih dostopov do informacijskega sistema podjetja ali organizacije je kompleksna in \u010dasovno zahtevna naloga. IT oddelki zato za la\u017eje doseganje ciljev med sabo pogosto uporabljajo in delijo gesla z vrhovnim administratorskim dostopom. S tem pa je povezana cela vrsta te\u017eav. Primerno upravljanje nivojev dostopov ni ve\u010d le sistem za laj\u0161anje nespe\u010dih no\u010di vodij, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1126,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1123","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novice"],"_links":{"self":[{"href":"https:\/\/adm-adria.si\/en\/wp-json\/wp\/v2\/posts\/1123","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adm-adria.si\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adm-adria.si\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adm-adria.si\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/adm-adria.si\/en\/wp-json\/wp\/v2\/comments?post=1123"}],"version-history":[{"count":1,"href":"https:\/\/adm-adria.si\/en\/wp-json\/wp\/v2\/posts\/1123\/revisions"}],"predecessor-version":[{"id":1127,"href":"https:\/\/adm-adria.si\/en\/wp-json\/wp\/v2\/posts\/1123\/revisions\/1127"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/adm-adria.si\/en\/wp-json\/wp\/v2\/media\/1126"}],"wp:attachment":[{"href":"https:\/\/adm-adria.si\/en\/wp-json\/wp\/v2\/media?parent=1123"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adm-adria.si\/en\/wp-json\/wp\/v2\/categories?post=1123"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adm-adria.si\/en\/wp-json\/wp\/v2\/tags?post=1123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}