Device is not removed from a device group in CA PAM

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

PAM Admin cannot remove certain Devices from a particular Device Group.  Everytime they successful save it the devices reappear.

Even if they go into the actual Device and remove the Group Membership there.

Environment

Component : PRIVILEGED ACCESS MANAGEMENT

Release: PAM 3.4.x, 4.0.x

Cause

When you define a Tag on a Device Group it makes the membership dynamic.

Resolution

Remove the tag from the device group (and that will automatically remove all devices sharing that tag) or change the tag for the device you want to remove to make sure it does not match any tag defined for the device group you want to remove it from.