The Account lifecycle policies section allows administrators to create and edit separate policies for account lifecycle, password rotations, heartbeat schedule, and propagation. These policies can be applied directly to specific providers (in Administration – Privileged access management (PAM) – Edit – Account lifecycle policy), or configured to be applied by default to all accounts.

| SETTINGS | DESCRIPTIONS |
|---|---|
| Name | Set a name for the account lifecycle policy. |
| Set as default | Apply the account lifecycle policy to every account provider by default. |
| Password policy mode | Enable/disable the password policy. |
| Password policy | Choose a password policy. Requires policies to have been created previously in Administration – Password policy. |
| Action on checkin | Define an action to be performed upon checking in an entry. |
| Manual password rotation | Enable/disable manual password rotation. To manually rotate a password, go to the entry to rotate, click More (vertical ellipsis button), and select Reset password. |
| Password rotation schedule | Set a schedule for automatic password rotation. |
| Heartbeat | Enable/disable heartbeat. |
| Heartbeat schedule | Set a schedule for the heartbeat. Requires the Scheduler service. |
| Propagation | Select a propagation script, provided one was created in Administration – Privileged access management (PAM) – Propagation. |