Account lifecycle policies

The Account lifecycle policies section allows administrators to create and edit separate policies for account lifecycle, password rotations, heartbeat schedule, and propagation. These policies can be applied directly to specific providers (in Administration – Privileged access management (PAM) – Edit – Account lifecycle policy), or configured to be applied by default to all accounts.

SETTINGS	DESCRIPTIONS
Name	Set a name for the account lifecycle policy.
Set as default	Apply the account lifecycle policy to every account provider by default.
Password policy mode	Enable/disable the password policy.
Password policy	Choose a password policy. Requires policies to have been created previously in Administration – Password policy.
Action on checkin	Define an action to be performed upon checking in an entry.
Manual password rotation	Enable/disable manual password rotation. To manually rotate a password, go to the entry to rotate, click More (vertical ellipsis button), and select Reset password.
Password rotation schedule	Set a schedule for automatic password rotation.
Heartbeat	Enable/disable heartbeat.
Heartbeat schedule	Set a schedule for the heartbeat. Requires the Scheduler service.
Propagation	Select a propagation script, provided one was created in Administration – Privileged access management (PAM) – Propagation.