You can allow Privileged Account Manager users to generate API tokens from the user console by adding them to the API Users group, which is created by default.
To allow LDAP users to generate API tokens, you must first add these users to the Framework User Manager and then continue with the following procedure.
To add a user to API Users group:
Click Framework User Manager > API Users.
Click Edit in the Group Information task pane.
In the Members section, select the user whom you want to generate API tokens from the user console.
You can also add a user to the group by dragging and dropping the user onto the API Users group.
To allow API tokens to skip secondary authentication, select Bypass Secondary Authentication in the Secondary Authentication section.
For more information about the Framework User Group configuration, see Modifying a User Group.