PIM Manager settings · Settings > Approvals & policy
Max eligibility duration
| Key | OperationalPolicy.maxEligibilityDuration |
|---|---|
| Where | Settings > Approvals & policy > Operational policy |
| Type | Choice |
| Default | 365 days (P365D) |
| Feature | Policy templates you choose, changed only with approval · Community, Pro Business, Pro Enterprise, Pro MSP |
What it does
The longest eligible assignment PIM Manager lets a policy template allow (30, 90, 180 or 365 days). The engine applies it to the policies it writes for the groups and roles PIM Manager manages, where the template requires an eligibility to end: a longer maximum is shortened to this value. A template that allows a permanent eligibility keeps it.
When set
When set lower than a template: on the next engine run Entra is told that new eligible assignments under that template may last at most this long. The engine log names each template it shortened.
When blank or default
At the default (365 days): nothing changes -- 365 days is also the longest the shipped templates allow.
Risk and how to reverse it
Medium when you lower it: new or renewed eligibilities end sooner, so people need them renewed more often. Eligibilities that exist today are not shortened. Reversible: pick a longer value and save.
Requires
SuperAdmin to change it. Free (Community) and Pro. Applies only to groups and roles PIM Manager manages.
Recommended
Leave it at 365 days unless your policy demands shorter eligibility everywhere.
Related settings
- Max activation duration OperationalPolicy.maxActivationDuration
- Require MFA on activation OperationalPolicy.mfaOnActivation
- Policy template used where a delegation names none -- PIM for Groups PolicyTemplateDefaults.group
- Policy template used where a delegation names none -- Entra ID roles PolicyTemplateDefaults.directoryRole
- Policy template used where a delegation names none -- Azure resource roles PolicyTemplateDefaults.azureRole
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack