Got an idea for a new feature? Maybe a tweak to make something work even better? Wish there was an integration with another product to make you even more productive? You've come to the right place.
The Product Ideas Portal lets you submit whatever product feedback you have, good, bad, ugly, and anywhere between.
Want to stay anonymous? Don't worry, no email address or name fields are shared on the public portal. You can create an account which lets you vote on other people's ideas and receive updates when your idea's status changes.
To learn more about how an idea becomes a feature, check out this infographic.
Change the behaviour of this call: "GET ManagedAccounts" so that, in the absence of any additional parameters, it returns all the managed accounts that are available to the requestor making the call.
This would be of benefit to anyone writing code to consume this API node for the purposes of automatic password checkout in scripts.
There is already a query parameter "type" that is listed as "optional/recommended" but no default value is shown.
Alternatively, update the documentation to show:
the default value of the "type" query parameter (p185)
And change the "Purpose" (p184)
from:
"Returns a list of managed accounts (or a single managed account depending on the query parameters provided) that can be requested by the current user."
to:
"Returns a list of managed accounts of a single type (or a single managed account depending on the query parameters provided) that can be requested by the current user.
... further to previous ...
looks like v5.2.4 of pbpsapi.py in the Resource Pack addressed this same behaviour
Attachments Open full size
It seems that an API user who has access to check out passwords for multiple account types must specify the account type in the API call:
fails when the requesting user can check out passwords for both type=system and type=domainlinked, and TGTAcc is a domain account linked to TGTSys
but:
works fine for the same requesting user.
If "type" is an optional query parameter, then it's reasonable to expect the call to work without it. If "type" isn't an optional query parameter, then it's reasonable to ask that the documentation should make this clear.
Or have I missed something blindingly obvious ? Happy to be corrected ...
Attachments Open full size
Can you expand on how retrieving all possible accounts helps with scripts that use managed credentials?
Attachments Open full size