SecurityInsight settings · Settings > AI

Privilege tier catalog: days kept while unchanged

Key	SI_PrivilegeTierClassifier_RefreshDays
Where	Settings > AI > AI spending
Type	int
Default	7 days: the catalog is rebuilt as soon as a role or permission changes, and at least once a week
Edition	Community

What it does

How long the privilege tier classifier keeps its catalog while nothing it is made from changed. Every run reads the Entra role definitions, the API permission catalog and the Azure role definitions (seconds); when they, the engine and the AI settings are the same as for the last complete catalog and that catalog is younger than this, the AI pass is skipped and the catalog is kept.

When set

A lower value rebuilds (and sends the AI requests) more often; 0 rebuilds on every run, as before. A catalog that left items untiered is always rebuilt on the next run.

When blank or default

Left blank, the default applies: 7 days: the catalog is rebuilt as soon as a role or permission changes, and at least once a week

Risk and how to reverse it

None to the data: a changed role or permission always rebuilds the catalog on the next run; the setting only decides how long an unchanged catalog is kept. Reversible at once.

Requires

Read by: privilege-tier-classifier.