Error: PAM-UI-1502: Device not deleted because of Password Authority errors. - PAM
Article ID: 281090
Updated On:
Products
Issue/Introduction
An attempt to delete a target device from PAM fails with an error message shown in red near the top of the PAM UI Devices page:
PAM-UI-1502: Device ### not deleted because of Password Authority errors.
The PAM session log on page Sessions > Logs contains the following message from the time when the device was attempted to be deleted:
PAM-CMN-2265: Target Server ### is not deleted. Reason: PAM-CM-0726: Delete server failed. Target server in use by password view policy. DeleteTargetServerCmd.deleteTargetServer: server id=##### in use by 1 password view policy(s): [####].
An attempt to delete the target application associated with the device fails with error:
PAM-UI-1003: Delete application failed. Target application in use by password view policy.
Environment
CA Privileged Access Manager (PAM) with service desk integration configured.
Cause
A target account associated with the device is configured in a password view policy (PVP) under the Service Desk tab. This PVP option requires PAM users to enter a valid service desk ticket number when requesting a password for any target account associated with the PVP.
Resolution
If the service desk integration, and therefore the PVP, is no longer in use, delete the PVP from the Credentials > Workflow > Password View Policies page. Afterwards deletion of the device should complete successfully.
Additional Information
The Password View Policies page does not include a column for the service desk integration. If it's not clear from the policy names which PVPs are associated with a service desk target account, you may have to edit your PVPs one by one and check on the configuration under the Service Desk tab.
If you cannot delete the PVP, because it is used by one or more of your target accounts, and you have a problem identifying the accounts using it, the following article can help: Target Accounts report with assigned password view policies for PAM. This report also retrieves the list of PVPs and saves them in a file, which can be used to identify PVPs with service desk configuration.
Feedback
