PIM Manager settings · Settings > Features & edition
Request for authorization (RFA) portal
| Key | FeatureGates.rfa.portal |
|---|---|
| Where | Settings > Features & edition > Feature customization |
| Type | On / off |
| Default | Off |
| Feature | Access request portal: switch on an account, or get temporary group access · Pro Business, Pro Enterprise, Pro MSP |
| Confirmation | PIM Manager asks you to confirm before it is switched on or off. |
What it does
Turns on the access-request job that runs every minute. It publishes who may request access to the public request portal, takes in submitted requests, decides them (auto-approved or by the department owner, per department), enables the admin account for the approved time, and disables it again when the time is over. It also shows pending requests on the PIM Manager home page.
When enabled
Within a minute, people listed as eligible can request their disabled admin account enabled from the portal with a one-time PIN. Approved requests enable the account on the engine's next run, and accounts are disabled again when their window ends. The decision mails are sent.
When disabled
The job does nothing: new portal requests are not picked up, and accounts that an earlier request enabled are not disabled when their window ends.
Risk and how to reverse it
Switching it on lets disabled admin accounts be re-enabled through a public portal, by auto-approval or one owner's approval. Switching it off while windows are open leaves those accounts enabled until you disable them yourself or switch it on again. Reversible either way, but check for open windows before switching it off.
Requires
A Pro licence (switching it on without one is refused). SuperAdmin to change it. The public RFA portal deployed (RFA settings: request store). 'Scheduled jobs' on. Departments with owners and an RFA mode on the admins who may request.
Recommended
On only after the RFA portal is deployed and departments are set up. Leave it on while any access window is open.
Related settings
- Access request API (REST, for ServiceNow and other systems) FeatureGates.api.broker
- Company name PortalBranding.CompanyName
- Support e-mail PortalBranding.SupportEmail
- RFA store account RfaBroker.StoreAccount
- Public portal URL RfaBroker.PortalUrl
- API applications (client ids) RfaBroker.ApiAppIds
- Ad-hoc groups consultants may request RfaBroker.AdHocGroups
- Default ad-hoc length (hours) RfaBroker.AdHocHours
- API keys RfaApiKeys
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack