PAssword View Policy (PVP) - Multiple E-mails

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Is it possible to disable Email notifications to the Approver in the Dual Authentication, when the target device is accessed multiple times within the permitted timeframe.

Background:

- The enduser has requested the access to the target device for a few hours
- The enduser exits/closes the connection to the target device well before the selected end time
- The enduser establishes the connection to the target device once again before the expiry of the permitted timeframe.

The above activites send emails to the Approver each time the enduser establishes the connection to the target device.

Below is the configuration of the Password View Policy - Dual Authentication and Email Notification.

Environment

All supported CA PAM versions as of October 2024.

Resolution

This is as per product design, the email notification is received by the approver every time the target device is accessed by the enduser. There is no option currently available to disable the email trigger the Approver even when the same target device is accessed multiple times by the same user during the permitted timeframe.