Linking target accounts with target groups and scheduled jobs using API calls

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Our list of target groups and scheduled jobs has grown very long, and sometimes it is very difficult to find out which account is updated by which scheduled job. When we check account data, we can see that a password was updated by a scheduled job, but there is no information on which job did it. We also don't see a direct way to find out which target groups a given account is member of. Are API calls available that we can use to compile a list of account - target group - scheduled job associations?

Resolution

As of November 2024 there are no external API resources available, either using the remote CLI or the Rest API, to retrieve scheduled jobs information.

Attached is a powershell script that can be used to get a list of target accounts that are members of target groups other than the default group "Targets" and print account and target group information to a CSV output file with columns

"Account Name", "Target Application Name", "Device Name", "Target Group Name", "TG ID"

This requires the external Rest API to be enabled, and an API key that has access to all account and target group data, such as an API key with Global Administrator privileges.