search cancel

userID(CLI) and gkUserId(REST API), are they same reference?

book

Article ID: 190087

calendar_today

Updated On:

Products

CA Privileged Access Manager (PAM) CA Privileged Access Manager - Cloakware Password Authority (PA) CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

Getting a PAM User returned via REST API and CLI shows different format and name.

Following is a sample user imported from Active Directory.

REST API
"https://capam.training.local/api.php/v1/users.json?sortBy=%2BuserName&limit=0&searchRelationship=AND&fields=*"

CLI
capam_command capam=capam.training.local adminUserID=super cmdName=searchUser



The User from REST API:
{
    "userId": "1234",
    "userName": "CN=sample user1,CN=Users,DC=training,DC=local",
    "userPrincipalName": "[email protected]",
}

User from CLI searchUser:

<User>
    <userID>[email protected]</userID>
    <gkUserId>1234</gkUserId>
    ...
    ...
</User>

Is the "userId" from (REST API) and "gkUserId" from (CLI) referencing the same?

Environment

Release :

Component : PRIVILEGED ACCESS MANAGEMENT

Resolution

They are the same.
When the AD User gets imported, the UserID would be assigned.
And depending on whether you use the REST API or the CLI, it is only the presentation difference.
They are referencing the same user record in the PAM database.