How to assign privileges to derive PAM reports

book

Article ID: 129730

calendar_today

Updated On:

Products

CA Privileged Access Manager - Cloakware Password Authority (PA) PAM SAFENET LUNA HSM CA Privileged Access Manager (PAM)

Issue/Introduction

"How to add a Credential Manager Role with privileges for specific Report "Activities" is discussed in this document.  

PAM drop down menus  - "Credentials" ==> "Manage Credential Groups" ==> "Credential Roles"  allows one to create a specific "Role" and assign the select privileges for the created "Role". 

Every Report related privilege is directly tied to a Report related Activity.  In total,  the Report related privileges/activities are the following

1.  Generate Report
2.  Get Report Data
3.   List Reports
4.   Schedule Reports
5.   Set Report Row Limit
 

Credential Manager Roles with specific Report related privileges can be created. This allows tailoring the privileges that can be granted to a Credential Manager role. 

Environment

PAM client's "Manage Credential Groups" .
 

Resolution

At a high level these are privileges related to the reports in PAM.  Discussion below talks about creating a "Credential Role" with required Reporting Privileges.

Screenshot #1  - Navigate to the "Manage Credential Groups" ==> "Credential Roles" 

<Please see attached file for image>

User-added image

b. Screen Shot #2 -  Select the privileges/activities for the role being created. 

<Please see attached file for image>

User-added image

Additional Information

None. 

Attachments

1558688692294000129730_sktwi1f5rjvs16fo1.jpeg get_app
1558688689322000129730_sktwi1f5rjvs16fo0.jpeg get_app