How to update Account PAM_CONFIG setting after account got enabled for PAM

[Saathvik]

Team,

I want to check if there is any API or another method to do bulk update of Account PAM_CONFIG settings after account got enabled for PAM. Similar to below API

https://documenter.getpostman.com/view/6171505/U16bvotf#3d6bbe19-eb2f-4207-a5f7-568a1a510f35

Use case: We have certain accounts on specific endpoints that got PAM Enabled as per existing PAM_CONFIG on respective connection level. Now we want to modify certain timeouts like maxIDRequestableTime and maxCredSessionRequestTime. So we are looking for an option to bulk update for all existing PAM enabled accounts to use new time out configurations.

Can someone provide directions to achieve this?

@NageshK : Any thoughts?

[NageshK]

@Saathvik It seems the only way for this is to use custom query job to update the values in bulk. 

[Saathvik]

@NageshK  thanks for the reply, So there is no such API not even updateAccount API

{{url}}/ECM/{{path}}/updateAccount?

If not can we raise this as IDEA as this is could be one good feature to have? Because custom query job is going to deprecated in newer version

[NageshK · Accepted solution]

@Saathvik we do have updateAccount API and that updates one account at a time. You would have to script it to automate the update for a list of accounts. 
yes, please mention it in IDEA portal. 

[Saathvik]

@NageshK : Can we use upload csv file option to update PAM_Config to achieve this?

[Saathvik]

I have opened an IDEA: https://ideas.saviynt.com/ideas/EIC-I-4283 for this.

[AS5278]

@Saathvik 

Were you able to achieve this?. We were doing this earlier using the CustomQueryJob. But after upgrading to v23.8 we moved to EnhancedQueryJob. But, using EnhancedQueryJob it's not working