Help Center> Cloud Bastion Host> User Guide> Policy> Password Change Rules> Querying and Editing a Password Change Rule

Querying and Editing a Password Change Rule

CBH allows you to edit password change rules to meet your changed O&M requirements. For example, you can change when and how a password change rule is executed and which accounts, account groups, and resources a password rule is used for.

  • A modified password change rule takes effect the instant its status changes to Enabled.

Prerequisites

You have the operation permissions for the Chpwd Rules module.

Querying and Editing Password Change Rule Configurations

  1. Log in to the CBH system.
  2. Choose Policy > Chpwd Rules > Chpwd Rules.
  3. Query password change rules.

    • Quick search

      Enter a keyword in the search box to quickly query password change rules by rule name, resource name, and account,

    • Advanced search

      Enter keywords in the corresponding attribute search boxes to search for rules in exact mode.

      Figure 1 Advanced search

  4. Click the name of the password change rule that you want to edit or click Manage in the row of the rule in the Operation column. The details page of the rule is displayed.

    Figure 2 Viewing details about a password change rule

  5. View and edit basic information.

    In the Basic Info area, click Edit. In the displayed dialog box, edit the rule details.

    • You can edit Rule Name, Timing, Method, and Options.
    • The Department cannot be modified.
    Figure 3 Viewing the basic information

  6. View and edit accounts related to the rule.

    • To relate an account to the rule or remove a related account, click Edit in the Account area and complete modifications in the displayed dialog box.
    • To only remove a related account, click Remove in the row of the related account. The rule becomes invalid for the deleted account.
    Figure 4 Viewing related accounts

  7. View and edit account groups related to the rule.

    • To relate an account group to the rule or remove a related account group, click Edit in the AccountGrp area and complete modifications in the displayed dialog box.
    • To only remove a related account group, click Remove in the row of the related account group. The rule becomes invalid for all accounts in the deleted account group.
    Figure 5 Viewing related account groups