Ability to see User Name (Requester) in the Approver email

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Our PAM approvers are asking for the ability to see a person's name in the email that comes out for approval, not just their user ID.

 

From the help section – only “userID” is available for the requester but for the approvers, you can add the approvers name

 

ClassName Values	methodName Values
TargetAccount	getUserName
TargetApplication	getName getType getExtensionType
TargetServer	getDeviceName getHostName
PasswordViewPolicy	getName
PasswordViewRequest	getReason getReasonDescription getSsoType getReferenceCode
User (the user name generating the password view request)	getUserID

 

Environment

Release : 4.0

Cause

There are additional user attributes available, but the documentation has not been updated as of October 2022.

Resolution

The following additional user attributes are available:

First Name: @User.getFirstName@

Last Name: @User.getLastName@

Email Address: @User.getEmail@

 

Sample External Password Approval Body template:

Do not reply to this email.

 A password view request has been submitted with the following details: 
 Requestor : @User.getUserID@ (@User.getFirstName@ @User.getLastName@, email: @User.getEmail@)
 Requested Account: @TargetAccount.getUserName@
 Requested Account Target Application Name: @TargetApplication.getName@ 

...

And this is a sample email body received:

Do not reply to this email.

A password view request has been submitted with the following details:
Requestor : super (Super User, email: [e-mail])
Requested Account: genericacc1
Requested Account Target Application Name: genericdevice-generic

...