Add Escalated Approval Managers For Sapm Account

Overview

This API endpoint allows the configuration of approvers for a specific SAPM account within KRON PAM. By supplying the dbId of the SAPM account, users can designate which user groups are granted managerial approval rights for this account.

Usage

To set or modify the list of approvers:

1. Provide the necessary parameters in the request body.
2. If the newEscalatedManagers parameter is given an empty array, the associated user group will be removed from the list of managers for the specified SAPM account.

Parameters

• sapmDbId:
  • Represents the unique database ID of the SAPM account in KRON PAM.
• newEscalatedManagers:
  • An array that contains the IDs of user groups designated to act as managers for the given SAPM account.
  • It must be User Group ID
  • Note: If an empty array is supplied, it will lead to the removal of the user group from the list of managers tied to that SAPM account.
• sapmManagerDbId:
  • Denotes the ID of the original manager from which escalation originates. While it typically signifies the primary manager of the SAPM account, escalated managers, due to enhanced security measures and multi-layered permission structures, are viewed as a level above standard managers.
  • Note: The sapmManagerDbId highlights the foundational manager that has undergone escalation.