Why disabling of External API Access is not available sometimes?

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Customer wants to know why in some PAM environments the "External REST API" cannot be disabled. As shown in the PAM screen (Configuration > Security > Access screen) below the "Disabled" radio button is not displayed.

 

Environment

Release : All supported PAM releases.

Component : CA Privileged Access Manager 

Cause

PAM Service Control devices require the "External REST API" feature.

Resolution

Note customer's PAM license information (an example SYSINFO file attached) indicates that Server Control devices need to be configured. As Sever Control devices require that the "External REST API" always remain enabled, hence by design PAM will not allow disabling of External REST API.

Here is the PAM SYSINFO file showing licensing requested for Sever Control devices.

Additional Information

None.