Adding Windows Proxy Target Application and Target Account using REST APIs

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

When defining a Target Account for PAM Proxy User, how do you set the "Use Proxy Credential to change password" when creating a new Target Account?

Resolution

Advised you can see the information by running creating a Windows Proxy Target Test Account, with that value and run the following API:

GET /api.php/v1/devices.json/{deviceId}/targetApplications/{applicationId}/targetAccounts/{accountId}

when you pass an "*" to the "field" parameter you will get the following:

"attributes": {
    "tasksRemoved": "",
    "serviceDiscoveryServiceHostName": "",
    "discoveryAllowed": "f",
    "serviceInfo": "",
    "otherAccount": "",
    "discoveryGlobal": "f",
    "servicesRemoved": "",
    "extensionType": "windows",
    "forcePasswordChange": "f",
    "taskDiscoveryTaskHostName": "",
    "useOtherAccountToChangePassword": "agent",
    "lastGoodAgentId": "5001",
    "tasks": ""
  },

The bolded "useOtherAccountToChangePassword": "agent" is for:

Use proxy credentials to change password