PIM Manager settings · Settings > Access requests
Default ad-hoc length (hours)
| Key | RfaBroker.AdHocHours |
|---|---|
| Where | Settings > Access requests (RFA) > RFA broker & API |
| Type | Number |
| Default | 24 hours |
| Feature | Access request portal: switch on an account, or get temporary group access · Pro Business, Pro Enterprise, Pro MSP |
What it does
The length offered on the portal for an ad-hoc group membership, from 1 to 744 hours (31 days). The portal offers this value together with the request durations set on the person's department. When the time is up the membership is removed automatically.
When set
When set: from the next sync run the portal offers this length for every ad-hoc group request; requests already approved keep the length they were granted with.
When blank or default
When blank / at the default: 24 hours is offered, plus the department's own durations.
Risk and how to reverse it
A long default keeps privileged group membership in place for days without a new decision. Reversible: lower it; new requests use the new length, existing memberships end at their original time.
Requires
Pro (Request for authorization portal). Only matters when ad-hoc groups are offered. SuperAdmin to change.
Recommended
Keep 24 hours or less; long-term access belongs in the delegation grid, not in ad-hoc requests.
Related settings
- Request for authorization (RFA) portal FeatureGates.rfa.portal
- Access request API (REST, for ServiceNow and other systems) FeatureGates.api.broker
- Company name PortalBranding.CompanyName
- Support e-mail PortalBranding.SupportEmail
- RFA store account RfaBroker.StoreAccount
- Public portal URL RfaBroker.PortalUrl
- API applications (client ids) RfaBroker.ApiAppIds
- Ad-hoc groups consultants may request RfaBroker.AdHocGroups
- API keys RfaApiKeys
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack