PIM Manager settings · Operations > Guards
Limit: admin account deletes per run
| Key | GuardLimits.AdminDelete |
|---|---|
| Where | Operations > Guards |
| Type | Number |
| Default | 5 account deletes per run |
| Feature | PIM policy changes wait for a SuperAdmin · Community, Pro Business, Pro Enterprise, Pro MSP |
What it does
How many admin accounts one engine run may delete. An account is deleted only when its row says Deleted, which was approved before it was stored. When more accounts are waiting, the rest are deleted by the next run.
When set
When set: up to this many approved account deletes are carried out per run; the others wait for the next run. Break-glass accounts are never deleted, whatever this number is.
When blank or default
At the default: 5 account deletes per run. The limit itself cannot be switched off.
Risk and how to reverse it
A higher number deletes more accounts in one run. A deleted account can be restored from the directory's deleted users for 30 days. The number can only be set from 1 to 25; a stored value outside that range is ignored and 5 applies. Reversible at any time.
Requires
SuperAdmin to change it, on Operations > Guards. Free (Community) and Pro.
Recommended
Keep 5.
Related settings
- Second person for a release GuardReleaseSecondPerson
- Limit: commit removal check GuardLimits.CommitRemoval
- Limit: removal budget GuardLimits.RemoveBudget
- Limit: account-disable circuit breaker GuardLimits.DisableBreaker
- Limit: bulk revoke GuardLimits.BulkRevoke
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack