Privileged Entities

Privileged Entities are high-value Active Directory groups and accounts that, if compromised, can lead to full domain control. These entities possess elevated permissions or administrative capabilities that can significantly impact the security of the AD environment. They typically include objects that:

• Have direct or inherited privileged rights over sensitive AD objects.
• Can perform high-impact tasks such as user account management, delegation, or Group Policy Objects modifications.
• Possess administrative access to domain controllers, critical OUs, or organizational resources.

Privileged entities added by default in ADManager Plus

The following built-in groups are added as privileged entities by default:

Steps to add custom privileged entities in ADManager Plus

Privileged entities can be managed and added from the Identity Risk Assessment and Risk Exposure Management tabs.

1. Click Privileged Entities at the top-right corner of the page.
2. Click Add Privileged Entities.
3. Select the groups you want to add as a privileged entity.
4. Click Add.
5. Once added, users will be able to view the attack paths and privilege exposure associated with these groups.
6. Use the Manage drop-down to enable , disable, or delete entities as needed.