Configure four eyes authorization

  1. Enable four eyes authorization in Settings -> General -> Security

    enabling-four-eyes-auth



  2. Make sure Four Eyes Authorization Privilege is enabled for the user who would be granting access to view ssh logs. Go to Access Control->User-Action and grant the user Four Eye Authorization Privilege.

    acl-four-eyes




  3. Ensure that one of the two factor authentication method Google 2FA, Yubikey, or DUO Security is configured for the four eye authorizing user. In this case we are setting up Google 2FA.

    setup-google-2FA



  4. You have configured Four eyes authorization for viewing ssh logs.  Go to Users->SSH Logs to view the logs
    view-ssh-recordings



  5. The user with four eye authorizing privilege should enter his name and two factor code to authorize the viewing of logs.

    four-eye-authorizing-user


    google-four-eye



  6. The authorization by the four eye privileged user is complete!
0 (0)
Article Rating (No Votes)
Rate this article
    Attached Files
    There are no attachments for this article.
    Related Articles RSS Feed
    How to ensure that password are not recorded when ssh session recording is enabled to meet security compliances like PCI DSS 3.2 , HIPAA, SOX, SOC2, FFIEC, NERC CIP, ISO 27001 ?
    Viewed 1526 times since Fri, Mar 2, 2018
    How to enable google 2FA (Two factor Authentication) in ezeelogin ?
    Viewed 2794 times since Mon, Oct 9, 2017
    Can I use Google 2FA, Yubikey , DUO simultaneously?
    Viewed 2423 times since Thu, Dec 14, 2017
    Configure DUO 2FA in Ezeelogin SSH jumphost
    Viewed 1908 times since Thu, Nov 23, 2017
    Set SSH User Expiry
    Viewed 959 times since Thu, Sep 20, 2018
    Configure ssh timeout in ssh gateway
    Viewed 2149 times since Fri, Dec 1, 2017
    How do i restrict commands that a user can execute in ssh in ezsh shell ?
    Viewed 2369 times since Wed, Jun 14, 2017
    record rdp session
    Viewed 783 times since Thu, Dec 6, 2018
    How to stream the ssh sessions in real time?
    Viewed 2981 times since Wed, Nov 22, 2017
    encryption used in ezeelogin use to secure information stored
    Viewed 1857 times since Thu, Jun 15, 2017