PIM Manager settings · Settings > Access requests
Ad-hoc groups consultants may request
| Key | RfaBroker.AdHocGroups |
|---|---|
| Where | Settings > Access requests (RFA) > RFA broker & API |
| Type | List |
| Default | None selected (nothing is offered) |
| Feature | Access request portal: switch on an account, or get temporary group access · Pro Business, Pro Enterprise, Pro MSP |
| Confirmation | PIM Manager asks you to confirm before it is switched on. |
What it does
The permission groups that people using the request portal (typically consultants) may ask to join for a short time, in addition to the access they already have. Only defined groups are offered, and a group the account already holds is not shown.
When set
When set: the next sync run (every minute) publishes the offered groups to each eligible account on the portal. A request always waits for an Owner of the person's department, who is mailed and must decide within 24 hours. On approval the engine adds an active, time-limited membership on its next run and removes it automatically when the time is up.
When blank or default
When none are selected / at the default: the portal offers no groups to request; only enabling the person's own admin account can be requested.
Risk and how to reverse it
Every listed group becomes requestable by every portal-eligible account, so a department owner's approval is the only gate. Choose groups whose rights you are willing to hand out for hours. Reversible: deselect a group; it is no longer offered, but memberships already granted run until their end time.
Requires
Pro (Request for authorization portal) with the portal deployed. Department owners must be set, or nobody can approve. SuperAdmin to change. Length offered: Default ad-hoc length plus the department's own durations.
Recommended
Start with none, then add a few low-to-medium impact groups that consultants regularly need for short tasks.
Related settings
- Request for authorization (RFA) portal FeatureGates.rfa.portal
- Access request API (REST, for ServiceNow and other systems) FeatureGates.api.broker
- Company name PortalBranding.CompanyName
- Support e-mail PortalBranding.SupportEmail
- RFA store account RfaBroker.StoreAccount
- Public portal URL RfaBroker.PortalUrl
- API applications (client ids) RfaBroker.ApiAppIds
- Default ad-hoc length (hours) RfaBroker.AdHocHours
- API keys RfaApiKeys
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack