ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Adding Windows Proxy Target Application and Target Account using REST APIs

book

Article ID: 240769

calendar_today

Updated On:

Products

CA Privileged Access Manager (PAM)

Issue/Introduction

When defining a Target Account for PAM Proxy User, how do you set the "Use Proxy Credential to change password" when creating a new Target Account?

Environment

Release : 3.4.x, 4.0.x 

Component : PRIVILEGED ACCESS MANAGEMENT

Resolution

Advised you can see the information by running creating a Windows Proxy Target Test Account, with that value and run the following API:

GET /api.php/v1/devices.json/{deviceId}/targetApplications/{applicationId}/targetAccounts/{accountId}

when you pass an "*" to the "field" parameter you will get the following:

"attributes": {
    "tasksRemoved": "",
    "serviceDiscoveryServiceHostName": "",
    "discoveryAllowed": "f",
    "serviceInfo": "",
    "otherAccount": "",
    "discoveryGlobal": "f",
    "servicesRemoved": "",
    "extensionType": "windows",
    "forcePasswordChange": "f",
    "taskDiscoveryTaskHostName": "",
    "useOtherAccountToChangePassword": "agent",
    "lastGoodAgentId": "5001",
    "tasks": ""
  },

The bolded "useOtherAccountToChangePassword": "agent" is for:

Use proxy credentials to change password