PIM Manager settings · Operations > Guards
Limit: commit removal check
| Key | GuardLimits.CommitRemoval |
|---|---|
| Where | Operations > Guards |
| Type | Number |
| Default | 25 rows of one list in one commit |
| Feature | PIM policy changes wait for a SuperAdmin · Community, Pro Business, Pro Enterprise, Pro MSP |
What it does
How many rows of one list a single commit may take out before a SuperAdmin has to approve it. It is a count: there is no share of the list in the rule, so taking 2 rows out of a list of 3 does not ask, and taking 26 rows out of a list of 1000 does. Two more cases always ask, whatever this number is, and their numbers are fixed: a commit that keeps none of the rows the list has now (also when it adds new ones), and a commit that would leave 2 rows or fewer of a list that has more than 5 rows.
When set
When set: a commit that takes more rows than this out of one list is not saved. The commit popup shows the rows and the two numbers. An Admin reads that a SuperAdmin must approve; a SuperAdmin gets an Approve button and must give a reason. The approval covers exactly the rows shown and is recorded with who, when, why and every row.
When blank or default
At the default: 25 rows. The check itself cannot be switched off.
Risk and how to reverse it
A higher number lets an Admin remove more rows of a list in one commit without a second pair of eyes. A lower number asks a SuperAdmin more often. The number can only be set from 5 to 200; a stored value outside that range is ignored and 25 applies. Reversible at any time.
Requires
SuperAdmin to change it, on Operations > Guards. Free (Community) and Pro.
Recommended
Keep 25 unless routine clean-ups in your lists are larger. Raise it for a planned bulk change rather than permanently, or let a SuperAdmin approve that one commit.
Related settings
- Second person for a release GuardReleaseSecondPerson
- Limit: removal budget GuardLimits.RemoveBudget
- Limit: account-disable circuit breaker GuardLimits.DisableBreaker
- Limit: bulk revoke GuardLimits.BulkRevoke
- Limit: admin account deletes per run GuardLimits.AdminDelete
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack