We are building a service in catalog that we would like to limit access to only members of management. We are looking for ways to accomplish that in Catalog, so far we have tried creating a sub business unit but haven't figured out a way to automate adding and deleting people as needed. Another thought was to use PAM to read the SD contact record (since those are already synced with AD) and if possible modify the contact record in EEM to grant access to the sub business unit.
Is PAM capable of updating EEM?
Or is there a better/easier way to do this?
Any ideas are welcome