Target Account Scheduled Jobs - checkinCheckout

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Does having a Password View Policy with the configuration as in here generate scheduled jobs that appear in the Target Account Scheduled Jobs page?

Options selected are
- Change Password on View
- Check-out/Check-in
- Change Password on Auto Connect
- Change Password on Session End

 

Resolution

These scheduled jobs are created by CA PAM and these are not triggered by any of the pre-defined scheduled jobs.

These are created based on the "force check-in after" setting in the PVP, i.e. PAM schedules a job to do the check-in after the configured time interval, if the user has not checked the account in manually by then.

These scheduled jobs (checkinCheckout-Number) are no longer visible once the associated Password View Policy activity is completed.

Additional Information

If there are two options selected in the password view policy (1) Change Password on View and (2) Check-out/Check-in, the scheduled job is created for the "Check-out/Check-in" only.

For details about the scheduled job that is triggered when only "Change Password on View" is selected review KB 238508