PAM-CMN-0236: Roles with the Manage Credential privilege must have at least one Password Authority group .

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

When a PAM Admin attempts to alter any user and give them Global Administrator Privilege, they get the error:

Even though they are selecting a Credential Management Group.

Environment

Release : 4.1.1

Resolution

During the upgrade the following Credential Management Group and Credential Management Roles, were not created:

• SecretsManagementUser
• Secret Management Users

Created them manually and then PAM Admin was able to grant the Global Administrator Privilege to end-users.