PIM Manager settings · Settings > Automation
Rows without an AutoExtend value are extended
| Key | AutoExtend.DefaultOn |
|---|---|
| Where | Settings > Automation > Auto-extend |
| Type | On / off |
| Default | On |
| Feature | Admin accounts with the full lifecycle · Community, Pro Business, Pro Enterprise, Pro MSP |
| Confirmation | PIM Manager asks you to confirm before it is switched off. |
What it does
What a blank AutoExtend cell on a delegation row means. Who decides an extension, first match wins: an access review outcome (Keep extends, Remove does not), then an owner's Deny of that exact end date, then the row's own TRUE / FALSE, and only then this default.
When enabled
When on: a row with a blank AutoExtend value is renewed by the engine before it ends, like a row set to TRUE, unless a review or an owner says otherwise. Silence means extend.
When disabled
When off: a row with a blank AutoExtend value is NOT renewed. On its end date the membership or role assignment simply ends in your tenant, and the person loses that access.
Risk and how to reverse it
Switching it off can make many people lose access on their end dates without anyone acting -- every row created without an explicit AutoExtend value is affected. Reversible: switch it back on; the next engine run renews what is still live, but an assignment that already ended is only recreated by the engine's normal reconcile of the row.
Requires
SuperAdmin to change it. Free (Community) and Pro. Works together with the lead time above and with access reviews and owner decisions on the same page.
Recommended
Keep it on, and use explicit AutoExtend=FALSE on rows (or an owner Deny) for access that must end.
Related settings
- Extend ... days before a permission ends AutoExtend.LeadDays
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack