> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/server/web-interface/administration/modules/privileged-access/settings.md). # Settings The ***Setting*** section located in ***Administration*** – ***Privileged access management (PAM)*** allows administrators to determine the default checkout and account lifecycle policy settings. ![](https://cdnweb.devolutions.net/docs/DVLS4275_2026_1.png)
DEFAULT VAULT VISIBILITY SETTINGSDESCRIPTION
Default vault visibilityDetermine whether users can see PAM vaults and request access by default, or if they need an invitation.
CHECKOUT POLICY SETTINGSDESCRIPTIONS
Default checkout modeEnable or disable checkouts by default.
Default approval modeDefine which requests require approval by default, if any.
Users can approve their own checkout requestsChoose whether users can approve their own requests, and under which condition.
Include admins as approverInclude all administrators in the list of approvers when checking out an entry.
Include PAM administrators when listing approversInclude all PAM administrators in the list of approvers when checking out an entry.
Default reason modeChoose under which conditions users need to give a reason for checking out an entry.
Default checkout time (minutes)Set a default checkout time.
PAM default max checkout time (minutes)Set a maximum checkout time, after which no time extensions are allowed.
Ticket number modeDetermine under which conditions the Ticket # field is required to be filled, if at all, when checking out an entry.
Terminate sessions on check inForce session close on checkin.
Automatically check in PAM account when closing the entryForce PAM account checkin when closing an entry it contains.
ACCOUNT LIFECYCLE POLICY SETTINGSDESCRIPTIONS
Password policyChoose a password policy. Requires policies to have been created previously in Administration – Password policy.
Action on checkinDefine an action to be performed upon checking in an entry.
Manual password rotationEnable/disable manual password rotation. To manually rotate a password, go to the entry to rotate, click More (vertical ellipsis button), and select Reset password.
Password rotation scheduleSet a schedule for automatic password rotation.
HeartbeatEnable/disable heartbeat.
Heartbeat scheduleSet a schedule for the heartbeat. Requires the Scheduler service.
PropagationSelect a propagation script, provided one was created in Administration – Privileged access management (PAM) – Propagation.
--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.devolutions.net/server/web-interface/administration/modules/privileged-access/settings.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.