Add Escalated Approval Managers For Vault Group

Overview

This API endpoint facilitates the configuration of approval managers for a specific Vault group within KRON PAM. By inputting the dbId of the Vault group, users can designate which user groups are escalated to managerial approval rights for this particular Vault group.

Usage

To set or modify the list of approval managers for a Vault group:

1. Provide the necessary parameters in the request body.

Parameters

• dbId:
  • Denotes the unique database ID of the Vault group in KRON PAM.
• newEscalatedManager:
  • Refers to the ID of the user group that's intended to be escalated to managerial rights for the designated Vault group.
• applyType:
  • Description: Specifies the extent of the managerial escalation.
  • Possible Values:
    • THIS_ONLY: Escalation is applied solely to the indicated Vault group.
    • ONE_LEVEL: Escalation is applied to the designated Vault group and its direct sub-groups.
    • FULL_TREE: Escalation is extended to the entire hierarchy or tree of the specified Vault group.
• managerDbId:
  • Description: Similar to sapmManagerDbId, this parameter signifies the ID of the original manager from which the escalation originates. It typically represents the main manager of the Vault group. However, due to enhanced security protocols, this manager can be escalated.