Update Safe member

This method updates an existing Safe member.

The user who runs this web service must have Manage Safe Members permissions in the Vault.

URL

  
http://<IIS_Server_Ip>/PasswordVault/api/Safes/{SafeUrlId}/Members/{MemberName}/
 

Make sure there are no spaces in the URL.

The following characters are not supported in URL values: + & %

Resource information

HTTP method

 Content type

PUT

application/json

Header parameter

Parameter

Description
Authorization

The token that identifies the session, encoded in BASE 64.

Type: String

Mandatory: Yes

Default value: None

URL parameters

https://localhost/passwordvault/api/Safes/Aviv/Members/AdminUser2/

Parameter

Description

safeUrlId

The unique ID of the Safe.

Type: String

Mandatory: Yes

Default value: None

memberName

The Vault user name, Domain user name or group name of the Safe member.

Type: String

Mandatory: Yes

Default value: False

Body parameters

{
    "membershipExpirationDate":1234567,
    "permissions": {
                "useAccounts": true,
                "retrieveAccounts": true,
                "listAccounts": true,
                "addAccounts": true,
                "updateAccountContent": true,
                "updateAccountProperties": true,
                "initiateCPMAccountManagementOperations": true,
                "specifyNextAccountContent": true,
                "renameAccounts": true,
                "deleteAccounts": true,
                "unlockAccounts": true,
                "manageSafe": true,
                "manageSafeMembers": true,
                "backupSafe": true,
                "viewAuditLog": true,
                "viewSafeMembers": true,
                "accessWithoutConfirmation": true,
                "createFolders": true,
                "deleteFolders": false,
                "moveAccountsAndFolders": true,
                "requestsAuthorizationLevel1": true,
                "requestsAuthorizationLevel2": false
            }
}

Parameter

Description

MembershipExpirationDate

When the user's Safe membership expires.

Type: DateTime

Default value: None

Permissions

User or group permissions in the Safe.

Type: Boolean/Numeric

Valid values: See Permissions parameters.

Permissions parameters

Parameter

Description

UseAccounts

Use accounts but cannot view passwords.

Type: Boolean

Valid values: True/False

RetrieveAccounts

Retrieve and view accounts in the Safe.

Type: Boolean

Valid values: True/False

ListAccounts

View accounts list.

Type: Boolean

Valid values: True/False

AddAccounts

Add accounts in the Safe. Users who have this permission automatically have UpdateAccountProperties permissions as well.

Type: Boolean

Valid values: True/False

UpdateAccountContent

Update existing account content.

Type: Boolean

Valid values: True/False

UpdateAccountProperties

Update existing account properties.

Type: Boolean

Valid values: True/False

InitiateCPMAccountManagementOperations

Initiate password management operations through the CPM such as changing passwords, or verifying and reconciling passwords. When this parameter is set to False, the SpecifyNextAccountContent is automatically set to False.

Type: Boolean

Valid values: True/False

SpecifyNextAccountContent

Specify the password that is used when the CPM changes the password value. This parameter can only be specified when InitiateCPMAccountManagementOperations is set to True.

When InitiateCPMAccountManagementOperations

is set to False, this parameter is automatically set to False.

Type: Boolean

Valid values: True/False

RenameAccounts

Rename existing accounts in the Safe.

Type: Boolean

Valid values: True/False

DeleteAccounts

Delete existing passwords in the Safe.

Type: Boolean

Valid values: True/False

UnlockAccounts

Unlock accounts that are locked by other users.

Type: Boolean

Valid values: True/False

ManageSafe

Perform administrative tasks in the Safe, including:

  • Update Safe properties

  • Recover the Safe

  • Delete the Safe

Type: Boolean

Valid values: True/False

ManageSafeMembers

Add and remove Safe members, and update their authorizations in the Safe.

Type: Boolean

Valid values: True/False

BackupSafe

Create a backup of a Safe and its contents, and store in another location.

Type: Boolean

Valid values: True/False

ViewAuditLog

View account and user activity in the Safe.

Type: Boolean

Valid values: True/False

ViewSafeMembers

View Safe members` permissions.

Type: Boolean

Valid values: True/False

RequestsAuthorizationLevel1

Requests Authorization Level 1.

Type: Boolean

Valid values: True/False

Either the RequestsAuthorizationLevel1 parameter or the RequestsAuthorizationLevel2 parameter can be set to True. You cannot set both parameters to True.

RequestsAuthorizationLevel2

Requests Authorization Level 2.

Type: Boolean

Valid values: True/False

Either the RequestsAuthorizationLevel1 parameter or the RequestsAuthorizationLevel2 parameter can be set to True. You cannot set both parameters to True.

AccessWithoutConfirmation

Access the Safe without confirmation from authorized users. This overrides the Safe properties that specify that Safe members require confirmation to access the Safe.

Type: Boolean

Valid values: True/False

CreateFolders

Create folders in the Safe.

Type: Boolean

Valid values: True/False

DeleteFolders

Delete folders in the Safe.

Type: Boolean

Valid values: True/False

MoveAccountsAndFolders

Move accounts and folders in the Safe to different folders and subfolders.

Type: Boolean

Valid values: True/False

Result

{
    "safeUrlId": "Aviv",
    "safeName": "Aviv",
    "safeNumber": 22,
    "memberId": 15,
    "memberName": "AdminUser2",
    "memberType": "User",
    "membershipExpirationDate": 1234586,
    "isExpiredMembershipEnable": true,
    "isPredefinedUser": false,
    "isReadOnly": false,
    "permissions": {
        "useAccounts": true,
        "retrieveAccounts": true,
        "listAccounts": true,
        "addAccounts": true,
        "updateAccountContent": true,
        "updateAccountProperties": true,
        "initiateCPMAccountManagementOperations": true,
        "specifyNextAccountContent": true,
        "renameAccounts": true,
        "deleteAccounts": true,
        "unlockAccounts": true,
        "manageSafe": true,
        "manageSafeMembers": true,
        "backupSafe": true,
        "viewAuditLog": true,
        "viewSafeMembers": true,
        "accessWithoutConfirmation": true,
        "createFolders": true,
        "deleteFolders": false,
        "moveAccountsAndFolders": true,
        "requestsAuthorizationLevel1": true,
        "requestsAuthorizationLevel2": false
    }
}

Parameter

Description

safeUrlId

The unique ID of the Safe used when calling Safe APIs.

Type: String

safeName

The unique name of the Safe.

Type: String

safeNumber

The unique numerical ID of the Safe.

Type:  Integer

memberId

The Vault user ID, Domain user ID, or group ID of the Safe member.

Type:  String

memberName

The Vault user name, Domain user name or group name of the Safe member.

Type: String

memberType

The member type.

Type: String

Valid values: user\group

membershipExpirationDate

The member's expiration date for this Safe. For members that do not have an expiration date, this value will be null.

Type: DateTime

isExpiredMembershipEnable

Whether or not the membership for the Safe is expired. For expired members, the value will be True.

Type: Boolean

isReadOnly

Whether or not the current user can update the permissions of a member.

Type: Boolean

isPredefinedUser

Whether the member is a predefined user or group of the Vault.

Type: Boolean

permissions

The permissions that the user or group has for this Safe.

See Permissions parameters.

Permissions parameters

Parameter

Description

useAccounts

Use accounts but cannot view passwords.

Type: Boolean

retrieveAccounts

Retrieve and view accounts in the Safe.

Type: Boolean

listAccounts

View the Accounts list.

Type: Boolean

addAccounts

Add accounts in the Safe. Users who have this permission automatically have UpdateAccountProperties permissions as well.

Type: Boolean

updateAccountContent

Update existing account content.

Type: Boolean

updateAccountProperties

Update existing account properties.

Type: Boolean

initiateCPMAccountManagementOperations

Initiate password management operations through CPM, such as changing, verifying, and reconciling passwords.

When this parameter is set to False, the SpecifyNextAccountContent parameter is also automatically set to False.

Type: Boolean

specifyNextAccountContent

Specify the password that is used when the CPM changes the password value.

This parameter can only be specified when the InitiateCPMAccountManagementOperations parameter is set to True.

When InitiateCPMAccountManagementOperations is set to False, this parameter is automatically set to False.

Type: Boolean

renameAccounts

Rename existing accounts in the Safe.

Type: Boolean

deleteAccounts

Delete existing passwords in the Safe.

Type: Boolean

unlockAccounts

Unlock accounts that are locked by other users.

Type: Boolean

manageSafe

Perform administrative tasks in the Safe, including:

  • Update Safe properties
  • Recover the Safe
  • Delete the Safe

Type: Boolean

manageSafeMembers

Add and remove Safe members, and update their authorizations in the Safe.

Type: Boolean

backupSafe

Create a backup of a Safe and its contents, and store in another location.

Type: Boolean

viewAuditLog

View account and user activity in the Safe.

Type: Boolean

viewSafeMembers

View Safe members` permissions.

Type: Boolean

requestsAuthorizationLevel1

Request Authorization Level 1.

Type: Boolean

requestsAuthorizationLevel2

Request Authorization Level 2.

Type: Boolean

accessWithoutConfirmation

Access the Safe without confirmation from authorized users. This overrides the Safe properties that specify that Safe members require confirmation to access the Safe.

Type: Boolean

createFolders

Create folders in the Safe.

Type: Boolean

deleteFolders

Delete folders from the Safe.

Type:  Boolean

moveAccountsAndFolders

Move accounts and folders in the Safe to different folders and subfolders.

Type: Boolean

URL

  
https://<IIS_Server_Ip>/PasswordVault/WebServices/PIMServices.svc/Safes/{SafeName}/Members/{MemberName}
 

Make sure there are no spaces in the URL.

The following characters are not supported in URL values: + & %

Resource information

HTTP method

 Content type

PUT

application/json

Header parameter

Parameter

Description
Authorization

The token that identifies the session, encoded in BASE 64.

Type: String

Mandatory: Yes

Default value: None

URL parameters

Parameter

Description

SafeName

The name of the Safe to which the Safe member belongs.

Type: String

Mandatory: Yes

Default value: None

MemberName

The Vault/domain user/group member to update.

Type: String

Mandatory: Yes

Default value: None

Body parameters

  
{
  "member":{
    "MembershipExpirationDate":"<MM\DD\YYYY or empty for no expiration>",
    "Permissions":<User’s permissions in the Safe>
     [
       {"Key":"UseAccounts", "Value":<true/false>},
       {"Key":"RetrieveAccounts", "Value":<true/false>},
       {"Key":"ListAccounts", "Value":<true/false>},
       {"Key":"AddAccounts", "Value":<true/false>},
       {"Key":"UpdateAccountContent", "Value":<true/false>},
       {"Key":"UpdateAccountProperties", "Value":<true/false>},
       {"Key":"InitiateCPMAccountManagementOperations", "Value":<true/false>},
       {"Key":"SpecifyNextAccountContent", "Value":<true/false>},
       {"Key":"RenameAccounts", "Value":<true/false>},
       {"Key":"DeleteAccounts", "Value":<true/false>},
       {"Key":"UnlockAccounts", "Value":<true/false>},
       {"Key":"ManageSafe", "Value":<true/false>},
       {"Key":"ManageSafeMembers", "Value":<true/false>},
       {"Key":"BackupSafe", "Value":<true/false>},
       {"Key":"ViewAuditLog", "Value":<true/false>},
       {"Key":"ViewSafeMembers", "Value":<true/false>},
       {"Key":"RequestsAuthorizationLevel", "Value":<0/1/2>},
       {"Key":"AccessWithoutConfirmation", "Value":<true/false>},
       {"Key":"CreateFolders", "Value":<true/false>},
       {"Key":"DeleteFolders", "Value":<true/false>},
       {"Key":"MoveAccountsAndFolders", "Value":<true/false>}
     ]
  }
}

Parameter

Description

MembershipExpirationDate

Defines when the user's Safe membership expires. Specify “” for no expiration date.

Type: String

Default value: None

Permissions

User permissions in the Safe.

Type: Boolean/Numeric

Valid values: See Permissions parameters.

isReadOnly

Whether or not the current user can update the permissions of the member.

Type: Boolean

Permissions parameters

Parameter

Description

UseAccounts

Use accounts but cannot view passwords.

Type: Boolean

Valid values: True/False

RetrieveAccounts

Retrieve and view accounts in the Safe.

Type: Boolean

Valid values: True/False

ListAccounts

View accounts list.

Type: Boolean

Valid values: True/False

AddAccounts

Add accounts in the Safe. Users who have this permission automatically have UpdateAccountProperties permissions as well.

Type: Boolean

Valid values: True/False

UpdateAccountContent

Update existing account content.

Type: Boolean

Valid values: True/False

UpdateAccountProperties

Update existing account properties.

Type: Boolean

Valid values: True/False

InitiateCPMAccountManagementOperations

Initiate password management operations through the CPM such as changing passwords, or verifying and reconciling passwords. When this parameter is set to False, the SpecifyNextAccountContent is automatically set to False.

Type: Boolean

Valid values: True/False

SpecifyNextAccountContent

Specify the password that is used when the CPM changes the password value. This parameter can only be specified when InitiateCPMAccountManagementOperations is set to True.

When InitiateCPMAccountManagementOperations

is set to False, this parameter is automatically set to False.

Type: Boolean

Valid values: True/False

RenameAccounts

Rename existing accounts in the Safe.

Type: Boolean

Valid values: True/False

DeleteAccounts

Delete existing passwords in the Safe.

Type: Boolean

Valid values: True/False

UnlockAccounts

Unlock accounts that are locked by other users.

Type: Boolean

Valid values: True/False

ManageSafe

Perform administrative tasks in the Safe, including:

  • Update Safe properties

  • Recover the Safe

  • Delete the Safe

Type: Boolean

Valid values: True/False

ManageSafeMembers

Add and remove Safe members, and update their authorizations in the Safe.

Type: Boolean

Valid values: True/False

BackupSafes

Create a backup of a Safe and its contents, and store in another location.

Type: Boolean

Valid values: True/False

ViewAuditLog

View account and user activity in the Safe.

Type: Boolean

Valid values: True/False

ViewSafeMembers

View Safe members` permissions.

Type: Boolean

Valid values: True/False

RequestsAuthorizationLevel

Requests Authorization Level.

  • 0 - cannot authorize

  • 1- authorization level 1

  • 2 - authorization level 2

Type: Integer

Valid values: 0, 1, 2

AccessWithoutConfirmation

Access the Safe without confirmation from authorized users. This overrides the Safe properties that specify that Safe members require confirmation to access the Safe.

Type: Boolean

Valid values: True/False

CreateFolders

Create folders in the Safe.

Type: Boolean

Valid values: True/False

DeleteFolders

Delete folders in the Safe.

Type: Boolean

Valid values: True/False

MoveAccountsAndFolders

Move accounts and folders in the Safe to different folders and subfolders.

Type: Boolean

Valid values: True/False

Result

  
{
  "member":{
    "MemberName":"<The name of the Safe member >",
    "MembershipExpirationDate":"<MM\DD\YYYY or empty for no expiration date>"
    "Permissions":
     {
       "UseAccounts":<true/false>
       "RetrieveAccounts":<true/false>
       "ListAccounts":<true/false>
       "AddAccounts":<true/false>
       "UpdateAccountContent":<true/false>
       "UpdateAccountProperties":<true/false>
       "InitiateCPMAccountManagementOperations":<true/false>
       "SpecifyNextAccountContent":<true/false>
       "RenameAccounts":<true/false>
       "DeleteAccounts":<true/false>
       "UnlockAccounts":<true/false>
       "ManageSafe":<true/false>
       "ManageSafeMembers":<true/false>
       "BackupSafe":<true/false>
       "ViewAuditLog":<true/false>
       "ViewSafeMembers":<true/false>
       "RequestsAuthorizationLevel":<0/1/2>
       "AccessWithoutConfirmation":<true/false>
       "CreateFolders":<true/false>
       "DeleteFolders":<true/false>
       "MoveAccountsAndFolders":<true/false>
     }
  }
}

Return codes

For a complete list of return codes, see Return Codes.