Thanks Ralf - again!
indeed, case got me again.
FTR, the GUI doesn't allow changing of the Check-in/Check-out interval without also changing Dual Auth Default and Max Request Intervals.
But the CLI does: running this command actually worked - I would've expected it to be a consistent behavior.
capam_command adminUserID=cliuser capam=pamserver.domain.com adminPassword=********** cmdName=updatePasswordViewPolicy PasswordViewPolicy.ID=1123 PasswordViewPolicy.checkinCheckoutRequired=true PasswordViewPolicy.checkinCheckoutInterval=720
Another observation - if i only want to set the intervals (as i do in the GUI), the command returns a status 400/success... but the dual auth intervals are ignored.
capam_command adminUserID=cliuser capam=pim-1pam004.mandtbank.com adminPassword=4lU8F6x3r81H3R cmdName=updatePasswordViewPolicy PasswordViewPolicy.ID=1123 PasswordViewPolicy.checkinCheckoutRequired=true PasswordViewPolicy.checkinCheckoutInterval=720 PasswordViewPolicy.dualAuthorizationInterval=720 PasswordViewPolicy.PasswordViewRequestMaxInterval=720 PasswordViewPolicy.PasswordViewRequestMaxDays=14
It turns out, that i must also include PasswordViewPolicy.dualAuthorization=true on the command line for the CLI to pay attention to the other dual auth intervals; however, if PasswordViewPolicy.dualAuthorization=true is specified then PasswordViewPolicy.approverIDs="list,of,approver's,ids" must also be specified on the command line, irrespective of whether or not the list of approvers is already specified on the existing PVP and you do not wish to update that list.
The same goes for PasswordViewPolicy.emailNotificationRequired=true - if specified, then you must also specify PasswordViewPolicy.emailNotificationUserIDs="list,of,email,users,ids" (or PasswordViewPolicy.emailNotificationUsers="list,of,user,logins"), etc; regardless of whether those settings had already been configured as required.
I may have missed it, but i don't recall seeing all these dependencies / requirements / intricacies in the documentation.
thanks again for the support