Enabling Privileged Action Gateway

[tamalika01 (Tamalika Biswas)]

Hi Experts,

We would need to create a new VA cluster with PAG enabled in order to create security groups in AD. As per the official documentation, we need to configure a new cluster and select “PAG” and create a new VA there. However, I also read the following in the VA Troubleshooting Guide:

sudo systemctl pag start: Enables Privileged Task Automation actions that run against target systems and applications.
Link: https://community.sailpoint.com/t5/IdentityNow-Connectors/Virtual-Appliance-Troubleshooting-Guide/ta-p/78735

So if I am enabling this service on one of the existing VAs, does that ensure that I will be able to use that VA on this workflow action:

Thanks,
Tamalika

[svenkitachalam (Sreejith Ramachandran)]

Hi Tamalika,

You need to set up a new VA for PAG. The cluster type for this would be Privilege Gateway.

Thanks,
Sreejith