Password View Request report with requester and approver details

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

PAM does not have a built-in report to list password view requests (PVRs) including details entered by the user when making a request and details entered by the approver when approving it. Can such a report be created using API calls?

Resolution

Attached is an archive containing a powershell script that makes the required API calls and writes a report with the desired contents.

It asks for the PAM server address, user credentials, and optional start and end dates/times (in UTC time) for the report. The PAM credentials provided should have access to all target data (accounts, applications and servers), so that all fields can be populated for each PVR. You can edit the script and hardcode one or more input parameters.

If you change header text in the "$newCsvFile = {} | Select ..." line, make sure to change the $csvEntry.'...' assignments near the bottom of the script accordingly.

The script was tested against an environment with several thousand target accounts, but smaller numbers for applications, servers and PVRs. It's possible that it will run into problems when run against a very large PAM database.

 A small sample report is included in the attached archive.