This message was deleted.

Keen for ideas on this one too... I'll have a similar req soon, cheers

FWIW.....doesn't have to use CyberArk, but that's the incumbent PAM solution

You could do this with HashiCorp Vault https://www.vaultproject.io/docs/secrets/ad. I'm not too familiar with cyberark but have seen this done with the local admin accounts but found the API super slow and cumbersome.