Glossary: Secure Infrastructure and Zero Trust

gMSA (Group Managed Service Account)

Also written: gMSA, gMSAs, Group Managed Service Account

An Active Directory service account whose password the domain controller computes and changes automatically, every 30 days by default. Only servers in its allowed group can fetch it, and Kettle & Crane's backup runs as `svc-backup$`.