Edit Vault Account

Request Overview

This API allows any editable Vault account to be modified. The new value of the desired parameter must be sent in the request. Several examples of usage are available.

• sapmdbId: ID of the Vault account to be edited.

• password: New password or certificate data.

• sapmGroupdbId: ID of the SAPM group database.

• useExistingPermissions: Indicates whether to use existing permissions.

---

Edit Vault Account parameters

POST /rest/sc/sapm/editSapmAccount accepts SapmRequestModel.

JSON field	Type	Required	Description
sapmDbId	Long	Yes	Database ID of the Vault account to edit.
secretName	String	No	Replacement account name.
secretType	String	No	Replacement account type when supported.
sapmGroupDbId	Long	No	Replacement parent Vault group database ID.
passwordChangePeriod	String	No	Rotation interval in days.
passwordChangePeriodCronExpression	String	No	Cron-based rotation schedule.
description	String	No	Replacement account description.
secretNotes	String	No	Replacement encrypted notes.
additionalInfo	String	No	Additional account information.
accountLevelProperties	Object	No	Replacement account-level properties.
useExistingPermissions	Boolean	No	Controls permission inheritance when moving the account.

Password changes are rejected by this endpoint; use the dedicated Update Password request.

curl --request POST \
     --url {{url}}/aioc-rest-web/rest/sc/sapm/editSapmAccount \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --cookie {{netrightCookie}}  \
     --header 'x-xsrf-token: {{csrftoken}}' \
     --data '"{\n  \"sapmDbId\": 2000001,\n  \"secretName\": \"renamed-dynamic-account\",\n  \"sapmGroupDbId\": 383826,\n  \"passwordChangePeriod\": \"2\",\n  \"useExistingPermissions\": true\n}"'