Symantec Privileged Access Management

I want to send email notifications to the users manager for breakglass. Email notifications are being received to a static email hard coded for now. This is for breakglass check out event

Step 1. I configured the manager attribute in the environment using the below steps

To configure the USER_MANAGER notification rule:

1. In the CA Identity Manager Management Console, select CA Identity Manager Environments. Then, select the environment for which you are configuring email notification.
2. Select Advanced Settings>Miscellaneous Properties.
3. In the Miscellaneous Properties page, complete the configuration steps for the lookup option that you want to use:
   • To use the managerattribute=<Manager AttributeName> lookup option:
     1. In the Property field, enter managerattribute.
     2. In the Value field, enter the attribute that stores the manager’s DN or user ID.
     3. Click Add.
     4. Click Save.

Step 2. I use the same below. I get an email to abc and xyz but not to the manager

D:\CA\jboss\jboss-4.2.3.GA\server\default\deploy\IdentityMinder.ear\custom\emailTemplates\default\completed\BreakGlassCheckOutAccountEvent

_to = "xyz@unionbank.com" + ',' +

           _util.getNotifiers("USER_MANAGER","ManagerLookup=managerattribute") + ',' +

"abc@unionbank.com" ;

When I try to print the manager it is blank.

The user and manager are configured in AD and I can retrieve it in ENTM GUI. Could you suggest what I am missing?

Is there a way I can use the other account attributes like custom 1-10. I don't see how to retrieve them?

ahmsh05

CA Technologies

It might not be possible to send an email to the user's manager from here, at least without some serious customization. see:

"You can also write a custom adapter and create your own rules for notifying a user’s manager. See the Programming Guide for Java." at the bottom of: 

https://support.ca.com/cadocs/0/CA%20IdentityMinder%2012%206%201-ENU/Bookshelf_Files/HTML/idocs/index.htm?toc.htm?273786.html

The document says it is possible. Am I missing something here?

https://docops.ca.com/ca-identity-manager/12-6-6/en/user-console-help/email-notifications/working-with-email-templates/custom-email-templates?resultnum=2&intcmp=searchresultclick

How to setup eMail notification in Privileged Identity Manger is described here

How To Set Up Email Notifications for Events - CA Privileged Identity Manager - 14.0 - CA Technologies Documentation 

(see also other relevant sections in the documentation entering the keyword "email" in the search field)

Should you still face issues in setting up eMail Notifcations please do not hesitate to open a case with the Support Team and we will completely review the configuration.