Renaming a Local User Group

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Is it possible to rename a local user group? When the first groups were created, there were no guidelines for user group names. But as more groups were added later on, there was a need for standard group names, and the old groups should be renamed to conform with the new standard. However, the group editor does not allow a group name change. Deleting and recreating the groups is not desirable, since group memberships and many access policies are configured for the groups already.

Resolution

There is no way to rename PAM user groups either interactively using the PAM UI, or using API calls. Deleting and recreating groups and associated policies is the only action a PAM administrator can take. User group and policy export/import should help making this effort less painful.

If you are in this situation and have a very strong reason for trying to preserve the existing user groups, open a case with PAM Support to discuss other options.