PIM Manager settings · Settings > Approvals & policy
Report a group as unused when nobody activated it for (days)
| Key | StaleGroupDays |
|---|---|
| Where | Settings > Approvals & policy > Groups |
| Type | Number |
| Default | 90 days (allowed: 7 to 3650) |
What it does
The validation reports a permission or role group that nobody has activated for a long time, or ever, so you can decide whether the access is still needed. This is the number of days without an activation after which a group is reported.
When set
When set: a group is reported after the number of days you chose. The report is a note on the validation; nothing is removed and no commit is blocked.
When blank or default
When blank or default: a group is reported after 90 days without an activation.
Risk and how to reverse it
None for access: this only changes when a note appears. A low number produces many notes for groups that are used rarely on purpose; a high number hides access nobody uses. The check runs only when activation data for your groups has been read.
Requires
SuperAdmin to change it. A whole number of days from 7 to 3650.
Recommended
90 days. Use a longer time if you have groups that are meant for rare tasks, such as a yearly audit.
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack