Rest API password rotation blanks out Access Type field

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

When Rest API call "PUT /api.php/v1/devices.json/{deviceId}/targetApplications/{applicationId}/targetAccounts" is made to rotate a Target Account, it is wiping/blanking out the Access Type field. We use this field for reporting purposes and every month the API rotates the password, the field is getting erased.

Environment

Release : 4.1

Cause

Access Type is a special field that is not retained when the Rest API call saves the updated target account object in the database.

Resolution

PAM Engineering found that there is no straightforward fix to the problem. A new feature request was created that will provide PAM admins the ability to configure additional descriptor fields, which could be used in dynamic groups, as well as defining the descriptor fields with either free-form or list values which would be configurable. As of December 2022 this feature is expected to be available in new PAM releases in the second half of 2023.