Symantec Privileged Access Management

  • 1.  Bug in custom build roles

    Posted Dec 07, 2018 01:23 AM

    In CA-PAM version 3.2.2.121 - "List Target accounts" privilege set for an custom Credential manager roles (Not an user role) which enables the users with that custom CM role to see all the accounts in "ACCESS" Page(Though No policies are created for them) rather It should control the visibility under Credentials--> Target Accounts. Is this a bug?



  • 2.  Re: Bug in custom build roles
    Best Answer

    Posted Dec 14, 2018 08:50 AM

    I don't quite understand your scenario.  I would want to see how you have the Target Group, Credential Role and Credential Group configured, and what Credential Groups are assigned to the user.  I do know that there are issues related to this topic, and currently have a defect open for one particular aspect.  I suggest that you open a Support Ticket, and include screen captures, showing how you have this configured and the result that leads you to believe PAM is not operating correctly.  We can then try to duplicate the problem and open a defect with Engineering if necessary.