credentialRoles API Output Not Listing All Roles

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

An administrator was testing the credentialRoles API and comparing its output with the CLI when they discovered that API output was missing one or more CM roles that were in the CLI output.

Cause

When reviewing the API Doc page in the PAM GUI, the page states that there is a default value of 30 if no value is given. In this case, the environment had more than 30 CM roles.

Resolution

Include limit=0 when making the GET credentialRoles API call if the environment has more than 30 roles.

Additional Information

The default limit of 30 also applies to the credentialUserGroups API call.