How to customize the 'Reason' list items in 'Reason Required for Password View' Policy dialog

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Utilizing 'Reason Required For View' or 'Reason Required For Auto Connect' Password View Policy (PVP) will show below dialog when PAM user attempts to show password or auto connect.

The default 'Reason' field list items are:
    Severity 1: Manual recovery from server outage
    Severity 1: Manual change due to potential password breach
    Severity 2: Password composition audit
    Severity 3: Application migration
    Severity 3: Pre-production application testing
    Other

The present article discusses how to customize the 'Reason' field list items to include additional reasons

Resolution

To add other items, perform the following actions

1. Login as 'super' user, go to Configuration>Security>Access and make sure the following items are Enabled
            - External REST API
            - Credential Management CLI
   
   
2. From the resulting screen capture all current/default Reason field items in the Show Password Dialog screen. This can be used if necessary as backup to restore the original list of Reasons
3. To modify the list, carry out the following REST API call adding to propertyValues variable the list of items that should be available in the Reason field list. For instance, assuming the list of reasons should be: Reason 1: Manual recovery, Reason 2: Automatic recovery and Reason 3: Application migration, then the call to be made would be:
   
   https://<PAM server fqhn>/cspm/servlet/adminCLI?adminUserID=super&adminPassword=<password>$&cmdName=setSystemProperty&propertyName=ViewPasswordReasons&propertyValues=Reason 1: Manual recovery|Reason 2: Automatic recovery|Reason 3: Application migration
   
   where:
   
     <PAM server fqhn> : PAM server Fully Qualified Hostname or PAM server's IP address
     <password> : 'super' user password

Following this modification, when accessing the Show Password dialog, the Reason field will have as available items the new list specified