How to Find Target Accounts for a Password View Policy
search cancel

How to Find Target Accounts for a Password View Policy

book

Article ID: 235597

calendar_today

Updated On:

Products

CA Privileged Access Manager (PAM)

Issue/Introduction

When trying to add an approver to a password view policy, the following error occurs.

PAM-CM-1056: Password view policy approvers are not able to access the target accounts that use this policy.

However, the GUI does not have the ability to filter the target accounts for a specific password view policy, making it tougher to identify the account in question. How can I list all target accounts which use a specific password view policy?

Environment

Privileged Access Manager, all versions

Resolution

First, use the remote CLI command searchPasswordViewPolicy to get the password view policy ID, an example is below.

> capam_command capam=10.20.30.40 adminUserID=super cmdName=searchPasswordViewPolicy PasswordViewPolicy.name="test"

From the output, search for <ID>#####</ID> to get the ID and put it in the remote CLI command searchTargetAccount.

> capam_command capam=10.20.30.40 adminUserID=super cmdName=searchTargetAccount PasswordViewPolicy.ID=#####

This output will list every target account which uses that password view policy. Copy the output to a notepad and search for <userName> to get the names of the target accounts.

Additional Information