{
    "Connection": "On-Premise",
    "encryptionMechanism": "ENCRYPTED",
    "EVQuery": "",
    "WINDOWS": {
        "defaultCredentialConnection": {
            "connectionName": "Windows_Master_Connection",
            "changeConnectionCredentials": false,
            "MSConnectorVersion": "WINDOWS/1.0"
        },
        "defaultSecuritySystemDetails": {
            "securitySystemName": "new",
            "workflow": "AOBAutoApproveWF",
            "passwordPolicy": "PAM_Password_Policy"
        },
		"shareableAccounts": {
      "IDQueryCredentials": "acc.name in ('cadmin-iam-prod')",
      "IDQueryCredentialless": "acc.name in ('cadmin-iam-prod')",
      "IDQueryCredentiallessViewPwd": "acc.name in ('cadmin-iam-prod')",
      "IDQueryDomainCredentialless": "acc.name in('cadmin-iam-prod') ",
      "IDQueryDomainCredentials": "acc.name in ('cadmin-iam-prod')"
    },
        "processADAccount": "false",
        "sAMAccountNameColumnMapping": "name",
        "reconciledAccountAction": "NONE",
        "domainConnections": "Active Directory PAM",
        "maxCredSessionRequestTime": "36000",
        "maxCredlessSessionRequestTime": "36000",
        "endpointAttributeMappings": [
            {
                "column": "accessquery",
                "value": "WHERE  users.userkey in (select distinct u.userkey from users u LEFT JOIN user_accounts ua ON ua.userkey = u.userkey LEFT JOIN accounts ON accounts.accountkey = ua.accountkey LEFT JOIN endpoints ON endpoints.ENDPOINTKEY = accounts.ENDPOINTKEY LEFT JOIN account_entitlements1 ae ON ae.accountkey = accounts.ACCOUNTKEY LEFT JOIN entitlement_values ev ON ev.entitlement_valuekey = ae.entitlement_valuekey LEFT JOIN entitlement_types et ON et.entitlementtypekey = ev.entitlementtypekey  WHERE  ev.entitlement_value like '%CPAM-%')",
                "feature": "endpointAccessQuery"
            },
            {
                "column": "allowChangePassword_sqlquery",
                "value": "AC.ACCOUNTTYPE != 'Platform Service Account'",
                "feature": "allowChangepasswordquery"
            },
            {
                "column": "customproperty43",
                "value": "PAMDefaultUserAccountAccessControl",
                "feature": "accountVisibilityControl"
            },
            {
                "column": "accountNameRule",
                "value": "(substring(users.username,1,20))",
                "feature": "accountNameRule"
            }
        ],
        "endpointPamConfig": {
            "maxConcurrentSession": "50"
        },
		"accountVisibilityConfig": {
			"accountCustomProperty": "customproperty55",
			"accountMappingConfig": [
				{
					"accountPattern": "cadmin*",
					"mappingData": "roletest1",
					"override": "false"
				},
				{
					"accountPattern": "cadmin-iam-prod",
					"mappingData": "roletest2",
					"override": "false"
				}
			]
		}
    }
}