Symantec Privileged Access Management

Expand all | Collapse all

"Group.permissions" parameter to CLI command "updateGroup"

  • 1.  "Group.permissions" parameter to CLI command "updateGroup"

    Posted 07-08-2020 04:04 AM
    Hi there,

    Does anyone know the format of the "Group.permissions" parameter to CLI command "updateGroup"?

    The online document only says that it is "Array list object of filters, or XML encoded ArrayList of filters. If not set, the filters are cleared."

    Jiangping Li

  • 2.  RE: "Group.permissions" parameter to CLI command "updateGroup"

    Posted 07-09-2020 04:35 PM
    Group.permissions would contain the filters for a Target Group. These would be listed as a Java ArrayList. Are you trying to update a Target Group through the CLI?

  • 3.  RE: "Group.permissions" parameter to CLI command "updateGroup"

    Posted 07-09-2020 07:35 PM
    Hello, Can you clarify what you are trying to achieve? If you are trying to add filters to an existing target group, use command addFilter. You can use the searchFilter command to look for existing filters for a group, including the filter IDs, which you could then use with a deleteFilter command to delete filters that you no longer want in the group. I couldn't figure out the Group.permissions syntax on a modest attempt, but I would be using the addFilter/searchFilter/deleteFilter commands to manage group filters even if I knew the syntax. Having all filters wiped out if you make a mistake in the Group.permissions value would be a concern. There may be a problem in PAM, because the searchGroup command returns an empty list even when filters are defined.

  • 4.  RE: "Group.permissions" parameter to CLI command "updateGroup"

    Posted 07-09-2020 07:55 PM
    Thanks Guys for your reply.

    I am trying to updateGroup, maybe the description of the group.
    The problem with the updateGroup command is that if you don't provide a list of Group.permissions, then the existing ones will be wiped out. This is why I am trying to figure out the format of it.

    Jiangping Li

  • 5.  RE: "Group.permissions" parameter to CLI command "updateGroup"

    Posted 07-09-2020 10:53 PM
    Ok, good point. We'll figure it out and get back to you.

  • 6.  RE: "Group.permissions" parameter to CLI command "updateGroup"

    Posted 12 days ago
    This has not been forgotten, but turned out to be rather complicated with no readily available answer. We are still trying to figure a way to do this, but have not found the time yet. You may need to open a support case if this is pressing.

  • 7.  RE: "Group.permissions" parameter to CLI command "updateGroup"

    Posted 12 days ago
    Thanks Ralf for your help.

    Yeah, I have opened a support case with Broadcom.

    Jiangping Li