How to modify the list of assigned Proxies in a Target Application using the CLI

Products

• CA Privileged Access Manager (PAM)
• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

Team installed PA proxy on two servers and need to update 2000 applications. They have to remove existing proxy and add new proxy to all 200 applications. Because of a large number of application they have to update, they are requesting to update all applications using CLI batch command

Environment

Release : 3.3.2, 3.4.x 

Component : PAM

Resolution

First setup one sample Target Application manually in the GUI.

Then run the CLI

cmdName=searchTargetApplication

Use TargetApplication.type=windows to retrieve only target applications of type Windows Proxy

...

<ID>2001</ID>

...

 

as well the IDs of the Proxies currently assigned to it, e.g.

...

<Attribute.agentId>1002,2001</Attribute.agentId>

...

 

To modify the list of assigned proxies in the relevant Target Application run in the CLI

cmdName=updateTargetApplication TargetApplication.ID=2001 TargetApplication.type=windows Attribute.agentId=1002

 

If you have more than one proxy which you want to assign you have to enclose them in quotation marks (when running the CLI in a Windows CMD), e.g.

cmdName=updateTargetApplication TargetApplication.ID=2001 TargetApplication.type=windows Attribute.agentId="1002,2001"

Additional Information

 

Windows Proxy Target Connector CLI Configuration

addTargetApplication

searchTargetApplication