We don't have PAM in our environment so I can't really answer your question; however in case you were not aware, you can use GRLoader to manage CIs and their attributes including relationships. If your automation solution can execute 3rd party applications you could pass your attributes to GRLoader via csv, xls or xml. We use GRLoader to import relationship data via xls, not exactly automation, but it definitely removes the need for manual administration via the Admin interface. For additional information, GRLoader documentation is available in the SDM CMDB Tech Ref.