PIM Manager settings · Settings > Naming conventions
AdminAccountPatternHighPriv (high-privilege admin name)
| Key | NamingConventions.AdminAccountPatternHighPriv |
|---|---|
| Where | Settings > Naming conventions (also Get Started > Naming) |
| Type | Text |
| Default | {AdminWord}-{Initial}-L0-T0{Platform} (e.g. admin-abc-l0-t0-id) |
| Feature | Naming that matches your organization · Community, Pro Business, Pro Enterprise, Pro MSP |
What it does
The user name of a high-privilege (L0 / Tier 0) admin account, used when an admin row has Purpose = HighPriv. Note: the shipped pattern has no {AdminTypePrefix}, so external high-privilege admins get no x- unless you add it.
When set
When set: new high-privilege admin names use it. It also adds an admin-recognition prefix, and on hybrid tenants an AD admin row with no Purpose whose name matches it is created in the high-privilege AD OU.
When blank or default
It cannot be saved blank: this is one of the four required naming keys, and the save is refused. A blank value left in the store by an older version makes the engine use the shipped default for it, with a warning in every run.
Risk and how to reverse it
Existing accounts keep their names. Changing it can move where new AD high-privilege accounts are created (a row with no Purpose may no longer match and go to the day-to-day OU). It cannot be cleared (the save is refused). Reversible: restore the old pattern.
Requires
SuperAdmin in PIM Manager. Free (Community). Works with AdminWord, EnvironmentSuffixes and the AD OU placement (High Priv Admins).
Recommended
Keep a clear L0 / T0 marker in the name so high-privilege accounts are obvious in sign-in logs and route to the right AD OU.
Related settings
- Admin account domain AdminAccountUpnSuffix
- Prefix by admin type NamingConventions.AdminTypePrefixes
- Suffix by environment NamingConventions.EnvironmentSuffixes
- Service names NamingConventions.ServiceNames
- Admin word NamingConventions.AdminWord
- Tenant common name NamingConventions.TenantCommonName
- AdminAccountPattern (admin account name) NamingConventions.AdminAccountPattern
- AdminAccountDisplayNameSuffix (admin display name) NamingConventions.AdminAccountDisplayNameSuffix
- AdminAccountPatterns (how admin accounts are recognised) NamingConventions.AdminAccountPatterns
- AdminTypeDefault NamingConventions.AdminTypeDefault
- EnvironmentDefault NamingConventions.EnvironmentDefault
- ResourceGroupPattern (permission group name) NamingConventions.ResourceGroupPattern
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack