PIM - Reducing time frame for 'Managed Privileged Account Requests' PUPM

Products

• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

In our current version, our clients do the following.  They request checkout of a PUPM ID with a a valid start date of 'today's date' and will request it until a date in the future with a year of say 2099, 2050, 2029, 2031.

So, this allows them to keep an account in their list for 70 years in the case of the first example.  We have concerns about this and wonder if there is a way to restrict or prohibit this behavior in the product due to the following:

1. Allows someone to keep an account in their personal list for an extended period of time which does not seem to make sense.

 

Environment

Release : 12.x

Component : PAM SERVER COMPONENTS (WEB INTERFACE/JBOSS)

Cause

PIM product does not restrict the time an enduser can request a credential

Resolution

Support can assist in providing an SQL statement to remove the extreme requests without having to use the ENTM GUI (See Internal notes).