SecurityInsight settings · Settings > Data & retention

Days before an unseen asset is retired: service principals

Key	SI_Pro_AssetRetire_GraceDays_ServicePrincipal
Where	Settings > Data & retention > Assets no longer seen
Type	int
Default	The general value (30 days)
Edition	pro
Confirmation	SecurityInsight asks you to confirm before it is switched on.

What it does

The grace period for service principals -- an Entra service principal or managed identity. Overrides the general value for this category.

When set

An asset of this category that SecurityInsight has not seen for longer than this is retired; its open vulnerabilities close as AssetRetired and ServiceNow gets the state. Seen again = active again. Shorter than the seen-window (8 days) is raised to it.

When blank or default

Left blank, the default applies: The general value (30 days)

Risk and how to reverse it

A shorter grace period retires unseen service principals sooner and closes their open findings as retired. Reversible for the future.

Requires

A SecurityInsight Pro licence.