Understanding Record Types
Record Types are the foundation of Records simply because when creating a new record, you need to first select which record type to use.
When considering how to structure your Record Types in PAM, keep these concepts in mind:
-
PAM comes with many out of the box record types built in. We recommend that you do not delete or modify these types.
-
Instead of modifying these types, consider creating a new custom record type using these default types as a Parent to extend their need.
-
Instead of deleting these types, consider using the Hide option to remove them from the list of record types that users can select. This keeps the PAM user interface clean and organized without invoking such a permanent action like Delete.
-
-
If creating new record types, keep the names short and easily recognizable.
-
Like folders, record types use inheritance for Formulas, Tasks and Command Control. Consider how these types will be used for records and if any unique or custom tasks can be applied for use with inheritance. Although an AD record and a Web Server record may both use a Windows Host type, the task(s) associated with each may be different so two record types can help in this situation.
-
Custom fields can be added to record types to capture additional parameters to records.
How to effectively utilize record types in your PAM deployments is something that needs to be decided early on. Creating too many record types will lead to user confusion and management difficulties, while too few can lead to misuse by users and setup a scenario where they are not flexible enough to meet your future growth or demands.