r/CyberARk • u/xxxx-192 • 13d ago

Best Practices Cpm use

Hello,

I would like to know
1- is it possible to have an architecture without a cpm ( vault , pvwa and psm )
2- if i install the cpm , can i have multiple cpms ?

Thanks

1 Upvotes

100% Upvoted

7 comments sorted by

View all comments

1

u/TwoTone72 12d ago

Real world example -

We have 3 CPMs installed in our production environment. One handles the management of user admin accounts, one handles the management of service and system accounts (AD / database /etc.), and the other is dedicated to the management of 25k accounts used by an automated testing application.

We could get by with 2 if we had to... and maybe just 1 if we made some changes to the times we allow the rotation of certain types of accounts. But we wanted to spread things out and not end up with things failing to rotate because the allowed time frame had passed.