Inherited CM Groups Are Blank When Viewing a User

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

When attempting to view a user's inherited Credential Manager groups in PAM, the list is blank for some users.

Environment

Privileged Access Manager 4.1.0-4.1.7, 4.2.0

Cause

When "View Inherited Credential Manager Groups" is clicked, a SQL query is run in the background to list the CM Groups by name. There is an issue with the underlying query where only a limited number of CM groups are in the output. If any the user's inherited CM groups is not in the query output, then the list of inherited CM groups will be blank.

Resolution

The issue will be resolved as DE599452 in the 4.1.8 and 4.2.1 releases.