Delinea — the renamed ThycoticCentrify entity — has added cloud capabilities for Linux users to its Identity Access Management (IAM) arsenal, complementing its Privileged Access Management (PAM) portfolio.
Brad Shewmake, writing for Delinea, said that the firm was extending its cloud suite to enable centralised management of Linux user groups.
“Cloud Suite now enables customers to add users from cloud directories to existing local groups on Linux systems for more efficient, secure access,” Shewmake said.
Its IAM customers can now add users from specific cloud directories to existing local Linux groups, which Shewmake said would solve long-standing efficiency and management issues by simplifying and improving central policy management.
Jon Kuhn, senior vice-president of product management at Delinea, said members that were centrally defined in the platform would be dynamically added to the appropriate local groups, ensuring local data and file access permissions are enforced.
“This extends the principles of just-in-time and just-enough-access across hybrid and cloud infrastructures, which is increasingly business-critical for elastic environments where resources fluctuate,” Kuhn said.
Managing local groups on hundreds or even thousands of different systems can be challenging, and Linux users don’t have an equivalent to Windows’ Active Directory groups for centralised management across multiple servers in a domain or forest.
This can increased opex and over-provisioning, which also increases the risk of data breach.
“Cloud Suite now solves a huge (IAM) and PAM challenge for IT and devops teams,” added Kuhn.
For example, administrators can disable certain groups to cut off access to a specific Linux machine or account during a breach.
Other new capabilities in the Delinea Cloud Suite 22.1 release include an ability to perform privileged tasks without logging in, remote execution of predefined tasks and support for Windows Server 2022.
“Delinea‘s new brand identity underscores its progress as a combined company and renewed commitment to providing comprehensive, cloud-ready solutions that put privileged access at the center of cybersecurity — for small businesses and global enterprises,” according to the announcement.