search cancel

Required privileges for a PAM user to access the Rest API

book

Article ID: 189002

calendar_today

Updated On:

Products

CA Privileged Access Manager (PAM)

Issue/Introduction

We would like to have the option to create custom roles which includes access to the Rest API. Specifically what is needed so that the PAM user has access to the Settings > Api Doc page?

Environment

This applies to any supported PAM release as of April 2020.

Resolution

There are two requirements that the user needs to meet:
1) The Read Global Settings privilege is sufficient to allow a user to have the Settings menu available on the PAM UI.
2) The user has to have an API key configured. This is done under the API Keys tab when you edit a PAM user entry. API key credentials are needed for any Rest API request.