Delinea Policy Playbooks

This is your one-stop shop for all Delinea policy playbooks

  • Connect. Select. Update.

  • Connect
    Require MFA for Escalating Privilege in Kubernetes

    Block admin access to Kubernetes; enhance with context and approvals.

    Get the playbook
  • Connect
    Restrict Connections to Sanctioned IP Addresses

    Restrict access to sanctioned IPs; enhance with context and MFA.

    Get the playbook
  • Connect
    Restrict Connecting to Production Resources to Only During Business Hours

    Restrict production access to business hours; enhance with MFA and admin approval.

    Get the playbook
  • Connect
    Notify European Citizens That Their Sessions Are Being Recorded

    Notify EU users that sessions are recorded and actions logged.

    Get the playbook
  • Connect
    Restrict Access to GDPR Resources to the EU

    Restrict GDPR resource access to EU regions only.

    Get the playbook
  • Connect
    Restrict Access to Resources to EU Only

    Enforce resource access restrictions to EU-only regions.

    Get the playbook
  • Connect
    Forbid and Revoke Sessions to Prod Resources From Unhealthy Endpoints

    Assess and revoke sessions based on device trust to maintain zero trust.

    Get the playbook
  • Connect
    Require an MFA Prompt to Connect to All Prod Resources

    Require MFA to prevent data exfiltration and unauthorized Production access.

    Get the playbook
  • Connect
    Restrict Connecting to a Critical Database to Only During Business Hours

    Restrict production database access to business hours to prevent anomalies.

    Get the playbook
  • Connect
    Permit Connections to Production Kubernetes Clusters

    Enforce MFA for privileged users accessing production Kubernetes to prevent unauthorized access and credential compromise.

    Get the playbook
  • Connect
    Restrict Connecting to Production Kubernetes Clusters to Only During Business Hours

    Restrict production cluster access to business hours to prevent anomalies.

    Get the playbook
  • Connect
    Require MFA for Production SSH Servers

    Enforce MFA for privileged access to production Linux servers to prevent unauthorized access.

    Get the playbook
  • Select
    Forbid Access to the Database Unless the User Is in the Approved Role

    Forbid PII database access without pre-approved roles, enforcing RBAC.

    Get the playbook
  • Select
    Restrict SELECT Actions Based on Geo Privacy Requirements, Returning 10 Rows

    Limit rows and restrict US geolocation access to prevent SQL flood DoS attacks.

    Get the playbook
  • Select
    Limit Max Rows for Non-Approved Users

    Limit data collection and reduce DoS risk by restricting read actions.

    Get the playbook
  • Select
    Restrict Access to Users Data Table

    Block exfiltration and secure database user credentials to avoid unauthorized access.

    Get the playbook
  • Select
    Require MFA Prompt to Read Data From the Users Table

    Require MFA to prevent database user exfiltration and credential theft.

    Get the playbook
  • Update
    Require Admin Approval to Update Cardholders Table

    Require admin approval to update Credit Card Holder information.

    Get the playbook
  • Update
    Require Admin Approval to Update “Cardholders” Table on Any PCI Database

    Require admin approval for PCI cardholder table updates to prevent attacks.

    Get the playbook

Take the next step to secure all identities