PIM Manager settings · Settings > Emergency access

Break-glass accounts

Key	BreakGlassAccounts
Where	Settings > Emergency access (break-glass); also Get Started > Break-glass
Type	List
Default	Empty
Feature	Emergency access: break-glass accounts and a time-boxed override · Community, Pro Business, Pro Enterprise, Pro MSP
Confirmation	PIM Manager asks you to confirm before it is switched on or off.

What it does

The emergency accounts PIM must never lock out, by sign-in name (UPN) or object id. Both PIM Manager and the engine read this one list. A change is not applied directly: it becomes a request that a different SuperAdmin must approve within 72 hours, and every step is audited.

When set

When an account is on the list: every revoke, disable, sign-in session revoke and offboarding path in PIM skips it -- the engine, queued actions, access reviews and the disable circuit breaker. From the engine's next run after the request is approved.

When blank or default

When the list is empty: no account is exempt, so PIM can revoke, disable or offboard any account its rules reach -- including your emergency accounts.

Risk and how to reverse it

Adding an account shields it from every PIM guard, so only list real emergency accounts. Removing one makes it reachable by PIM's removals again. If the list cannot be read, PIM treats every account as break-glass and removes nothing that run. Reversible through a new approved request.

Requires

SuperAdmin to request a change, and a second, different SuperAdmin to approve it. Free (Community) and Pro.