You want to add an additional maintenance user on the PSM for SSH. How can you accomplish this if InstallCyberarkSSHD is set to Integrated?

In PSM for SSH (PSMP) Integrated mode, the standard OpenSSH daemon (sshd) is used alongside a PAM module to intercept privileged sessions. To add an additional maintenance user who can bypass the PSMP shell and access the host directly, you must create a local user on the Linux system and add this user to the group explicitly defined in the AllowGroups parameter within the /etc/ssh/sshdconfig file.

A: There is no default "PSMMaintenance Group" that automatically bypasses PSMP without being explicitly defined in the sshdconfig file.

B: proxymng is the default maintenance user created during installation, not the method for adding an additional user.

D: Creating a user named psmpmng does not automatically grant maintenance bypass rights; SSHD configuration is strictly required.

1. CyberArk Privileged Access Manager Documentation, "PSM for SSH Maintenance Users" (Integrated Mode configuration steps).

2. CyberArk Official Documentation, "Install PSM for SSH (Integrated mode)" (Version 12.x/13.x).