Creating a role to enable users in CA PAM

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Sometimes one may want to create a specific role in CA PAM to allow a certain user to enable disabled users without giving it the extra rights that predefined administrative roles such as Operational Administrator may have

This article describes the minimal rights that such a role requires

Environment

CA PAM all supported versions

Resolution

A role such as the one described will work only with the three following rights assigned:

Manage Users

Read Users

Assign User