Add Escalated Approval Managers For Vault Account

Overview

This API endpoint allows the configuration of approvers for a specific Vault account within KRON PAM. By supplying the dbId of the Vault account, users can designate which user groups are granted managerial approval rights for this account.

Usage

To set or modify the list of approvers:

1. Provide the necessary parameters in the request body.
2. If the newEscalatedManagers parameter is given an empty array, the associated user group will be removed from the list of managers for the specified Vault account.

Parameters

• sapmDbId:
  • Represents the unique database ID of the Vault account in KRON PAM.
• newEscalatedManagers:
  • An array that contains the IDs of user groups designated to act as managers for the given Vault account.
  • It must be User Group ID
  • Note: If an empty array is supplied, it will lead to the removal of the user group from the list of managers tied to that Vault account.
• sapmManagerDbId:
  • Denotes the ID of the original manager from which escalation originates. While it typically signifies the primary manager of the Vault account, escalated managers, due to enhanced security measures and multi-layered permission structures, are viewed as a level above standard managers.
  • Note: The sapmManagerDbId highlights the foundational manager that has undergone escalation.