Roles and Dashboard display

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

We need to define a Custom Role (i.e.: ISP Administrator) with the goal of having ALL the functionalities of a Global Administrator excluding the authorization to view Session Recording contents.

The problem is that whenever this role is assigned to a user group, the users belonging to this group don’t see DASHBOARD TAB in the login screen.

Dashboard appears again only if Global Administrator Role is manually assigned to users. 

Why is this so and is there any way around?

Environment

CA PAM 2.X and 3.X versions

Resolution

The Dashboard feature is only available to the Global Administrator or Operational Administrator, but not to all other user roles.

The privilege "Manage Management Console API" determines the visibility  of the Dashboard and this can't be assigned to custom user defined roles.

So this issue is working as designed