"Error Getting Access Credentials" When Trying to View Passwords in PAM

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

When trying to view a target account's password on the Access page, the following error occurs. The error only occurs for a subset of users.

PAM-UI-1202: Error getting access credentials

Cause

The users which experience the issue had both the Standard Users and Password Managers roles, but the permissions used by their Credential Manager role was interfering with the Standard Users role.

Resolution

As of PAM 4.3, it is not possible to manually assign the Standard Users CM Group. As a workaround, create a copy of the Standard Users CM Group with the following configuration, then assign it to the User or User Group that is seeing the error.