• No results found

Description:

This method updates an existing Safe member.

The user who runs this web service requires the following permission in the Vault:

Manage Safe Members

URL:

http://<IIS_Server_Ip>/PasswordVault /WebServices/

PIMServices.svc/Safes/{SafeName}

/Members/{MemberName}

The following parameters should pass as input in the URL:

Parameter Type Description

SafeName String Name of the Safe to which the Safe member belongs.

MemberName String Vault/Domain user/group member to update.

Note: Make sure there are no spaces in the URL.

HTTP Method:

PUT

Header Input:

The following input parameter is required in the header:

Parameter Type Description Valid Values Authorization String The token that

identifies the session.

A session token that was resumed from the `Logon method`.

Privileged Account Security

Parameters:

{

"members":{

" MembershipExpirationDate”:”<MM\DD\YY or empty for no expiration>”,

"Permissions":<User’s permissions in the Safe>

[

{"Key": "UseAccounts", "Value": <true/false>}, {"Key": "RetrieveAccounts", "Value": <true/false>}, {"Key": "ListAccounts", "Value": <true/false>}, {"Key": "AddAccounts", "Value": <true/false>},

{"Key": "UpdateAccountContent", "Value": <true/false>}, {"Key": "UpdateAccountProperties", "Value": <true/false>}, {"Key": "InitiateCPMAccountManagementOperations", "Value":

<true/false>},

{"Key": "SpecifyNextAccountContent", "Value": <true/false>}, {"Key": "RenameAccounts", "Value": <true/false>},

{"Key": "DeleteAccounts", "Value": <true/false>}, {"Key": "UnlockAccounts", "Value": <true/false>}, {"Key": "ManageSafe", "Value": <true/false>},

{"Key": "ManageSafeMembers", "Value": <true/false>}, {"Key": "BackupSafe", "Value": <true/false>},

{"Key": "ViewAuditLog", "Value": <true/false>}, {"Key": "ViewSafeMembers", "Value": <true/false>}, {"Key": "RequestsAuthorizationLevel", "Value": <0/1/2>}, {"Key": "AccessWithoutConfirmation", "Value": <true/false>}, {"Key": "CreateFolders", "Value": <true/false>},

{"Key": "DeleteFolders", "Value": <true/false>},

{"Key": "MoveAccountsAndFolders", "Value": <true/false>}, ]

} }

The

List

syntax has these parts:

Parameter Type Description Valid

Values MembershipExpirationDate String Defines when

the user`s Safe membership expires. Specify

“” for no expiration date.

Permissions User permission

in the Safe.

Permissions specified in the following table.

Specify the following permissions:

Parameter Type Description Valid Values UseAccounts

Boolean

Use accounts but not

view passwords.

true/false

RetrieveAccounts Boolean Retrieve and view accounts in the Safe.

true/false

ListAccounts Boolean View accounts list. true/false AddAccounts Boolean Add accounts in the Safe.

Users who are given AddAccounts authorization receive UpdateAccountProperties as well. Users who have this permission

automatically have

UpdateAccountProperties as well.

true/false

UpdateAccount Content

Boolean Update existing account content.

true/false

UpdateAccount Properties

Boolean Update existing account properties.

Boolean Initiate password management

operations through CPM, such as changing passwords,

verifying and reconciling passwords. When this parameter

is set to false, the SpecifyNext AccountContent is automatically set to false.

true/false

Privileged Account Security

Parameter Type Description Valid Values SpecifyNext

AccountContent

Boolean Specify the password that will be used when the CPM changes the password value.

This parameter can only be specified when InitiateCPMAccount is set to false this parameter is

automatically set to false.

true/false

RenameAccounts Boolean Rename existing accounts in the Safe.

true/false

DeleteAccounts Boolean Delete existing passwords in the Safe

true/false

UnlockAccounts Boolean Unlock accounts that are locked by other users.

true/false

ManageSafe Boolean Perform administrative tasks

in the Safe, including:

Update Safe properties Recover the Safe Delete the Safe

true/false

ManageSafe Members

Boolean Add and remove Safe members, and update their

authorizations in the Safe.

true/false

BackupSafe Boolean Create a backup of a Safe and its contents, and store in another location.

true/false

ViewAudit Log

Boolean View account and user activity in the Safe.

true/false

ViewSafe Members

Boolean View Safe members`

permissions.

true/false

Parameter Type Description Valid Values Requests

Authorization Level

Numeric Requests Authorization Level.

0 – cannot authorize 1 – authorization level 1

2 – authorization level 2

0/1/2

Access Without Confirmation

Boolean Access the Safe without confirmation from authorized users. This overrides the

Safe properties that specify

that Safe members require confirmation to access the Safe.

true/false

CreateFolders Boolean Create folders in the safe true/false

DeleteFolders Boolean Delete folders from the safe

true/false

MoveAccounts AndFolders

Boolean Move accounts and folders in the Safe to different folders and subfolders.

true/false

Privileged Account Security

Result:

{

"member":{

"MemberName":"<The name of the Safe member >",

"MembershipExpirationDate": “<MM\DD\YY or empty for no expiration date>”

"Permissions":

{

"UseAccounts": <true/false>

"RetrieveAccounts": <true/false>

"ListAccounts": <true/false>

"AddAccounts": <true/false>

"UpdateAccountContent": <true/false>

"UpdateAccountProperties": <true/false>

"InitiateCPMAccountManagementOperations": <true/false>

"SpecifyNextAccountContent": <true/false>

"RenameAccounts": <true/false>

"DeleteAccounts": <true/false>

"UnlockAccounts": <true/false>

"ManageSafe": <true/false>

"ManageSafeMembers": <true/false>

"BackupSafe": <true/false>

"ViewAuditLog": <true/false>

"ViewSafeMembers": <true/false>

"RequestsAuthorizationLevel": <0/1/2>

"AccessWithoutConfirmation": <true/false>

"CreateFolders": <true/false>

"DeleteFolders": <true/false>

"MoveAccountsAndFolders": <true/false>

} } }

Status Code: 201

Related documents