Rest API password rotation blanks out Access Type field
search cancel

Rest API password rotation blanks out Access Type field


Article ID: 256241


Updated On:


CA Privileged Access Manager (PAM)


When Rest API call "PUT /api.php/v1/devices.json/{deviceId}/targetApplications/{applicationId}/targetAccounts" is made to rotate a Target Account, it is wiping/blanking out the Access Type field. We use this field for reporting purposes and every month the API rotates the password, the field is getting erased.


Release : 4.1


Access Type is a special field that is not retained when the Rest API call saves the updated target account object in the database.


PAM Engineering found that there is no straightforward fix to the problem. A new feature request was created that will provide PAM admins the ability to configure additional descriptor fields, which could be used in dynamic groups, as well as defining the descriptor fields with either free-form or list values which would be configurable. As of December 2022 this feature is expected to be available in new PAM releases in the second half of 2023.