PAM-CM-3880 on PCP change for application "Azure Access Credential Accounts"

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Application  "Azure Access Credential Accounts" has the default PCP (Password Composition Policy) assigned which generates 16 characters long passwords. 

You want to use longer passwords, but PAM doesn't allow you to change the PCP for this target application. 

The target application editor allows you to select a different PCP when you edit target application "Azure Access Credential Accounts", but when you try to save it you get the following error: 

PAM-CM-3880: The requested operation is not allowed on the 'ca.portal.azure.com' Target Server

Cause

This is a built-in target application which is read only. 

Resolution

PAM release as of March 2025 do not allow the target application to be updated. 

PAM Product Management plans to let PAM administrators assign a different PCP in future releases.