PIM Manager settings · Settings > Approvals & policy

A change to the emergency access list waits for its second SuperAdmin for at most (hours)

Key	BreakGlassChangeTtlHours
Where	Settings > Approvals & policy > Approval and request limits
Type	Number
Default	72 hours (allowed: 1 to 168)

What it does

A change to the list of emergency access (break-glass) accounts is requested by one SuperAdmin and approved by another. This is how long such a request may wait. After that it expires and can never be approved; it must be raised again.

When set

When set: a request waits for the number of hours you chose. PIM Manager applies the new value at once, also to a request that is waiting.

When blank or default

When blank or default: a request waits for 72 hours.

Risk and how to reverse it

The emergency access list decides which accounts every guard leaves alone. A long wait lets a forgotten request be approved days later; the longest allowed is one week. A very short wait can make it impossible to get a second SuperAdmin in time. Reversible: set another value or go back to the default.

Requires

SuperAdmin to change it. A whole number of hours from 1 to 168.