Safes

The Safes page shows all PAM vault safes that Hydden Discovery has collected from connected data sources. Use this page to review safe inventory and assign manager ownership to safes across your vault infrastructure.

What Are Safes?

What it is: A safe is a logical container in a PAM vault (such as CyberArk) that holds privileged account credentials. Hydden Discovery inventories safes alongside accounts and identities, giving you a unified view of vault structure.

Why it matters: Unowned safes create accountability gaps in privileged access management. Assigning a manager to each safe establishes clear ownership. This supports audit readiness and helps security teams track who is responsible for each set of privileged credentials.

Diagram description: A left-to-right flow diagram showing the safe management workflow. A PAM Vault Data Source feeds into Hydden Discovery Inventory through collection. Discovery displays safes on the Safes Page, where a manager can be assigned. The Manager Assignment is recorded back in Discovery.

Key terms:

• Safe — A named container in a PAM vault that holds one or more privileged credentials.
• Manager — A platform user assigned as the accountable owner of a safe.

View Safes

Navigate to Configuration > Identify > Safes to open the Safes page.

The Safes grid shows all safes collected from your connected vault data sources. Each row displays the safe name, current manager, and other collected attributes.

Grid Controls

Control	Description
Search	Filter safes by name or any visible column value
Clear Filters	Remove all column filters and return to the full dataset
Reset Columns	Restore column visibility and order to defaults
Columns Panel	Show, hide, or reorder grid columns
Timeline	View historical safe data at a specific point in time

Timeline Integration

The Safes page polls for new data every 10 seconds. When new safe data is available, a notification appears. Click Reset to current time to load the latest data.

Use the timeline controls to view safes as they existed at a previous point in time. Manager assignments from that time period are displayed.

Assign a Manager to a Safe

Purpose: Link a responsible owner to one or more safes.

Before you begin:

• You need Administrator access to the Discovery console.
• The safe must appear in the Safes grid (collected from a connected vault data source).
• The manager must be a registered platform user.

Steps

1. Open the Safes page. Navigate to Configuration > Identify > Safes in the left menu.

2. Select one or more safes. Click the checkbox next to each safe you want to update. The Set Manager button becomes active when at least one row is selected.

3. Click Set Manager. The Set Manager dialog opens.

4. Choose a manager. Start typing a name or email in the search field. Select the user from the list.

5. Click OK. Discovery records the manager assignment for all selected safes.

Result: The Manager column for each selected safe updates to show the assigned user's name and email. The selection clears automatically.

Remove a Manager Assignment

To remove a manager, follow the same steps above. In step 4, clear the manager field instead of selecting a user. Click Save to confirm.

Related Topics

• Vaulted Credentials — Configure vault credential providers for data collection.
• CyberArk Integration — Connect Hydden Discovery to CyberArk for safe and account inventory.
• Owner Creation — Assign ownership to identities discovered across all data sources.